New NSE 4 NSE4_FGT-6.0 Exam Dumps

1. You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

2. When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

3. Examine this output from a debug flow:

Why did the FortiGate drop the packet?

4. Examine the exhibit, which shows the output of a web filtering real time debug.

Why is the site www.bing.com being blocked?

5. View the exhibit:

Which statement about the exhibit is true? (Choose two.)

6. Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

7. Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

A)

B)

C)

D)

8. A team manager has decided that while some members of the team need access to particular website, the majority of the team does not.

Which configuration option is the most effective option to support this request?

9. Examine this output from a debug flow:

Which statements about the output are correct? (Choose two.)

10. Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

11. Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)

12. Which statements about antivirus scanning mode are true? (Choose two.)

13. In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

14. An administrator is configuring an IPsec between site A and site B. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24.

How must the administrator configure the local quick mode selector for site B?

15. Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

16. Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

17. Examine the two static routes shown in the exhibit, then answer title following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

18. Which of the following statements about central NAT are true? (Choose two.)

19. Refer to the following exhibit.

Why is FortiGate not blocking the test file over FTP download?