File Info
| Exam | Fortinet NSE4 - FortiOS 6.2 |
| Number | NSE4_FGT-6.2 |
| File Name | Fortinet.NSE4_FGT-6.2.NetworkArmy.2021-05-25.119q.tqb |
| Size | 8 MB |
| Posted | May 25, 2021 |
| Download | Fortinet.NSE4_FGT-6.2.NetworkArmy.2021-05-25.119q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Examine the FortiGate configuration:
What will happen to unauthenticated users when an active authentication policy is followed by a fall through policy without authentication?
- The user must log in again to authenticate.
- The user will be denied access to resources without authentication.
- The user will not be prompted for authentication.
- User authentication happens at an interface level.
Correct answer: A
Explanation:
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD46875 Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD46875
Question 2
Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?
- FG-traffic VDOM
- Root VDOM
- Customer VDOM
- Global VDOM
Correct answer: B
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/6.2.0/new-features/287377/split-task-vdom-support Reference: https://docs.fortinet.com/document/fortigate/6.2.0/new-features/287377/split-task-vdom-support
Question 3
In an HA cluster operating in active-active mode, which path is taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?
- Client > secondary FortiGate > primary FortiGate > web server
- Client > primary FortiGate > secondary FortiGate > primary FortiGate > web server
- Client > primary FortiGate > secondary FortiGate > web server
- Client > secondary FortiGate > web server
Correct answer: C
Question 4
Which two statements about antivirus scanning mode are true? (Choose two.)
- In proxy-based inspection mode, antivirus buffers the whole file for scanning, before sending it to the client.
- In full scan flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
- In proxy-based inspection mode, files bigger than the buffer size are scanned.
- In quick scan mode, you can configure antivirus profiles to use any of the available antivirus signature databases.
Correct answer: AB
Question 5
The FSSO collector agent set to advanced access mode for the Windows Active Directory uses which convention?
- LDAP
- Windows
- RSSO
- NTLM
Correct answer: A
Question 6
Which two statements about virtual domains (VDOMs) are true? (Choose two.)
- Transparent mode and NAT mode VDOMs cannot be combined on the same FortiGate.
- Each VDOM can be configured with different system hostnames.
- Different VLAN subinterfaces of the same physical interface can be assigned to different VDOMs.
- Each VDOM has its own routing table.
Correct answer: CD
Question 7
What three FortiGate components are tested during the hardware test? (Choose three.)
- CPU
- Administrative access
- HA heartbeat
- Hard disk
- Network interfaces
Correct answer: ADE
Question 8
A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not.
Which configuration option is the most effective way to support this request?
- Implement web filter authentication for the specified website.
- Implement a web filter category override for the specified website.
- Implement DNS filter for the specified website.
- Implement web filter quotas for the specified website.
Correct answer: B
Question 9
Examine the exhibit, which shows the output of a web filtering real time debug. Why is the site www.bing.com being blocked?
- The web site www.bing.com is categorized by FortiGuard as Malicious Websites.
- The user has not authenticated with the FortiGate yet.
- The web server IP address 204.79.197.200 is categorized by FortiGuard as Malicious Websites.
- The rating for the web site www.bing.com has been locally overridden to a category that is being blocked.
Correct answer: D
Question 10
When using WPAD DNS method, which FQDN format do browsers use to query the DNS server?
- srv_proxy.<local-domain>/wpad.dat
- srv_tcp.wpad.<local-domain>
- wpad.<local-domain>
- proxy.<local-domain>.wpad
Correct answer: C
