New Fortinet NSE 4 Exam NSE4_FGT-6.2 Dumps Questions

1. NGFW mode allows policy-based configuration for most inspection rules.

Which security profile’s configuration does not change when you enable policy-based inspection?

2. Which statements about antivirus scanning mode are true? (Choose two.)

3. View the exhibit.

Which of the following statements are correct? (Choose two.)

4. An administrator needs to strengthen the security for SSL VPN access.

Which of the following statements are best practices to do so? (Choose three.)

5. Which statements about DNS filter profiles are true? (Choose two.)

6. Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

7. Which of the following statements are true when using WPAD with the DHCP discovery method? (Choose two.)

8. Examine this output from a debug flow:

Which statements about the output are correct? (Choose two.)

9. Which one of the following processes is involved in updating IPS from FortiGuard?

10. Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

11. Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

12. Examine the exhibit, which contains a virtual IP and firewall policy configuration.

The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.

The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.

Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

13. What information is flushed when the chunk-size value is changed in the config dlp settings?

14. Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

15. Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

16. If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does FortiGate take?

17. Which action can be applied to each filter in the application control profile?

18. View the certificate shown to the exhibit, and then answer the following question:

The CA issued this certificate to which entity?

19. You have tasked to design a new IPsec deployment with the following criteria:

Which topology should be used to satisfy all of the requirements?

20. An administrator has configured two VLAN interfaces:

A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface.

However, the DHCP client cannot get a dynamic IP address from the DHCP server.

What is the cause of the problem?

21. Examine the network diagram shown in the exhibit, and then answer the following question:

A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24.

Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

22. Examine the exhibit, which shows the output of a web filtering real time debug.

Why is the site www.bing.com being blocked?

23. Which of the following statements about virtual domains (VDOMs) are true? (Choose two.)

24. View the exhibit.

Based on this output, which statements are correct? (Choose two.)

25. In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

26. Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

27. You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. V

iew the default Edit Interface in the exhibit below:

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

28. View the exhibit.

Based on the configuration shown in the exhibit, what statements about application control behavior are true? (Choose two.)

29. Which of the following statements about converse mode are true? (Choose two.)

30. Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)

31. Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)

32. What settings must you configure to ensure FortiGate generates logs for web filter activity on a firewall policy called Full Access? (Choose two.)

33. Examine this output from a debug flow:

Why did the FortiGate drop the packet?

34. View the exhibit.

A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

35. Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

36. An administrator observes that the port1 interface cannot be configured with an IP address.

What can be the reasons for that? (Choose three.)

37. Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

38. Which of the following SD-WAN load Cbalancing method use interface weight value to distribute traffic? (Choose two.)

39. How can you block or allow to Twitter using a firewall policy?

40. What files are sent to FortiSandbox for inspection in flow-based inspection mode?