Fortinet NSE4 Certification NSE4_FGT-5.6 Exam Dumps

1. Which of the following statements about advanced AD access mode for the FSSO collector agent are true?

(Choose two.)

Response:

2. Which of the following IPsec parameters is a phase 2 configuration setting?

Response:

3. Which of the following actions are available under the System Information widget for system configuration?

(Choose two.)

Response:

4. Which of the following are differences between IPsec main mode and IPsec aggressive mode?

(Choose two.)

Response:

5. Which ways can FortiGate deliver one-time passwords (OTPs) to two-factor authentication users in your network?

(Choose three.)

Response:

6. Which file names will match the *.tiff file name pattern configured in a DLP filter?

(Choose two.)

Response:

7. An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to SSL VPN. How can this be achieved?

Response:

8. What step is required to configure an SSL VPN to access to an internal server using port forward mode?

Response:

9. Examine the exhibit, which shows a FortiGate device with two VDOMs: VDOM1 and VDOM2. Both VDOMs are operating in NAT/route mode. The subnet 10.0.1.0/24 is connected to VDOM1.

The subnet 10.0.2.0/24 is connected to VDOM2. There is an inter-VDOM link between VDOM1 and VDOM2.

What is required in the FortiGate configuration to route traffic between both subnets through an inter-VDOM link?

Response:

10. Which of the following configuration settings are global settings?

(Choose two.)

Response:

11. An administrator wants to monitor their network for any probing attempts aimed to exploit existing vulnerabilities in their servers. What must they configure on their FortiGate to accomplish this?

(Choose two.)

Response:

12. Why must you use aggressive mode when a local FortiGate IPsec gateway hosts multiple dialup tunnels?

Response:

13. Which statements about the firmware upgrade process on an active-active high availability (HA) cluster are true?

(Choose two.)

Response:

14. Examine this output from the diagnose sys top command:

Which statements about the output are true?

(Choose two.)

Response:

15. If antivirus, grayware, and heuristic scans are enabled on FortiGate, in which order does FortiGate apply the scanning?

Response:

16. Which of the following statements about the FortiGate application control database are true?

(Choose two.)

Response:

17. Which statement about the HA override setting in FortiGate HA clusters is true?

Response:

18. When does the FortiGate enter into fail-open session mode?

Response:

19. Which statement is true about split tunneling in SSL VPN?

Response:

20. LDAP and RADIUS are both remote authentication servers that FortiGate can tie into for authentication. What is a key difference between these servers?

Response:

21. Examine this output from a debug flow:

Which statements about the output are correct?

(Choose two.)

Response:

22. How does FortiGate select the central SNAT policy that is applied to a TCP session?

Response:

23. Which of the following settings and protocols can be used to provide secure and restrictive administrative access to FortiGate?

(Choose three.)

Response:

24. A FortiGate interface is configured with the following commands:

What statements about the configuration are correct?

(Choose two.)

Response:

25. Which statements correctly describe transparent mode operation?

(Choose three.)

Response:

26. How can you format the FortiGate flash disk?

Response:

27. Which of the following statements are true regarding the SD-WAN feature on FortiGate?

(Choose two.)

Response:

28. An administrator has configured a route-based IPsec VPN between two FortiGates. Which statement about this IPsec VPN configuration is true?

Response:

29. Which of the following protocols is used to encrypt the user data payload in an IPsec tunnel?

Response:

30. Examine the exhibit, which contains a virtual IP and a firewall policy configuration.

The WAN(port1) interface has the IP address 10.200.1.1/24. The LAN(port2) interface has the IP address 10.0.1.254/24. The top firewall policy has NAT enabled using outgoing interface address. The second firewall policy configured with a virtual IP (VIP) as the destination address.

Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

Response:

31. Examine the log message attributes. Which statements are correct?

(Choose two.)

hostname=www.youtube.com profiletype="Webfilter_Profile"

profile="default"

status="passthrough"

msg="URL belongs to a category with warnings enabled"

Response:

32. Examine the following log message attributes and select two correct statements from the list below.

(Choose two.)

Response: