Fortinet NSE 4 – FortiOS 6.2 NSE4_FGT-6.2 New Dumps V10.02

1. Examine the FortiGate configuration:

What will happen to unauthenticated users when an active authentication policy is followed by a fall through policy without authentication?

2. Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

3. In an HA cluster operating in active-active mode, which path is taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

4. Which two statements about antivirus scanning mode are true? (Choose two.)

5. The FSSO collector agent set to advanced access mode for the Windows Active Directory uses which convention?

6. Which two statements about virtual domains (VDOMs) are true? (Choose two.)

7. What three FortiGate components are tested during the hardware test? (Choose three.)

8. A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not.

Which configuration option is the most effective way to support this request?

9. Examine the exhibit, which shows the output of a web filtering real time debug.

Why is the site www.bing.com being blocked?

10. When using WPAD DNS method, which FQDN format do browsers use to query the DNS server?

11. Consider a new IPsec deployment with the following criteria:

- All satellite offices must connect to the two HQ sites.

- The satellite offices do not need to communicate directly with other satellite offices.

- Backup VPN is not required.

- The design should minimize the number of tunnels being configured.

Which topology should you use to satisfy all of the requirements?

12. What criteria does FortiGate use to look for a matching firewall policy to process traffic? (Choose two.)

13. Refer to the exhibit.

You are configuring the root FortiGate to implement the Security Fabric. You are configuring port10 to communicate with a downstream FortiGate. The exhibit shows the default Edit Interface.

When configuring the root FortiGate to communicate with a downstream FortiGate, which two settings must you configure? (Choose two.)

14. Which two statements about NTLM authentication are correct? (Choose two.)

15. Refer to the exhibit.

A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used, at the same time, for all traffic destined for 172.20.2.0/24.

Given the network diagram shown in the exhibit, which two static routes will satisfy this requirement on FGT1? (Choose two.)

16. On a FortiGate with a hard disk, how frequently can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)

17. Refer to the exhibit.

Given the partial output of an IKE real-time debug shown in the exhibit, which statement about the output is true?

18. An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark, Port Forward.

Which step must the administrator take to successfully achieve this configuration?

19. Which two static routes are not maintained in the routing table? (Choose two.)

20. An administrator wants to configure a FortiGate as a DNS server. FotiGate must use a DNS database first, and then relay all irresolvable queries to an external DNS server.

Which DNS method must you use?