Download Fortinet NSE4 -FortiOS 6-2.exam4tests.NSE4_FGT-6.2.2021-02-12.1e.87q.vcex

File Info

Exam	Fortinet NSE4 - FortiOS 6.2
Number	NSE4_FGT-6.2
File Name	Fortinet NSE4 -FortiOS 6-2.exam4tests.NSE4_FGT-6.2.2021-02-12.1e.87q.vcex
Size	4.9 Mb
Posted	February 12, 2021
Downloads	40

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAM_HUB

Discount: 20%

Demo Questions

Question 1

If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

A: The Services field prevents SNAT and DNAT from being combined in the same policy.
B: The Services field is used when you need to bundle several VIPs into VIP groups.
C: The Services field removes the requirement to create multiple VIPs for different services.
D: The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer.

Correct Answer: C

Question 2

Which of the following statements about central NAT are true? (Choose two.)

A: IP tool references must be removed from existing firewall policies before enabling central NAT.
B: Central NAT can be enabled or disabled from the CLI only.
C: Source NAT, using central NAT, requires at least one central SNAT policy.
D: Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

Correct Answer: AB

Question 3

Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

A: The VPN is configured to use pre-shared key authentication.
B: Extended authentication (XAuth) was successful.
C: Remote is the host name of the remote IPsec peer.
D: Phase 1 went down.

Correct Answer: A

Question 4

An administrator is configuring an antivirus profiles on FortiGate and notices that Proxy Options is not listed under Security Profiles on the GUI. What can cause this issue?

A: FortiGate needs to be switched to NGFW mode.
B: Proxy options section is hidden by default and needs to be enabled from the Feature Visibility menu.
C: Proxy options are no longer available starting in FortiOS 5.6.
D: FortiGate is in flow-based inspection mode.

Correct Answer: D

Question 5

Which of the following services can be inspected by the DLP profile? (Choose three.)

A: NFS
B: FTP
C: IMAP
D: CIFS
E: HTTP-POST

Correct Answer: BCE

Question 6

Examine the following web filtering log.

Which statement about the log message is true?

A: The action for the category Games is set to block.
B: The usage quota for the IP address 10.0.1.10 has expired
C: The name of the applied web filter profile is default.
D: The web site miniclip.com matches a static URL filter whose action is set to Warning.

Correct Answer: C

Question 7

If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does FortiGate take?

A: It notifies the administrator by sending an email.
B: It provides a DLP block replacement page with a link to download the file.
C: It blocks all future traffic for that IP address for a configured interval.
D: It archives the data for that IP address.

Correct Answer: C

https://help.fortinet.com/cli/fos50hlp/54/Content/FortiOS/fortiOS-cli-ref-54/config/dlp/sensor.htm
quarantine-ip : block access through the FortiGate unit for any IP address that sends traffic matching a sensor with this action. The IP address is added to the Banned User list for a duration of time that is determined by set expiry.

Question 8

An administration wants to throttle the total volume of SMTP sessions to their email server. Which of the following DoS sensors can be used to achieve this?

A: tcp_port_scan
B: ip_dst_session
C: udp_flood
D: ip_src_session

Correct Answer: A

https://help.fortinet.com/fos50hlp/52data/Content/FortiOS/fortigate-firewall-52/Security%20Policies/DoS%20Pr

Question 9

View the certificate shown to the exhibit, and then answer the following question: