Download Fortinet NSE4 -FortiOS 6-2.exam4tests.NSE4_FGT-6.2.2021-02-12.1e.87q.vcex

Download Exam

File Info

Exam Fortinet NSE4 - FortiOS 6.2
Number NSE4_FGT-6.2
File Name Fortinet NSE4 -FortiOS 6-2.exam4tests.NSE4_FGT-6.2.2021-02-12.1e.87q.vcex
Size 4.9 Mb
Posted February 12, 2021
Downloads 40

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Coupon: EXAM_HUB

Discount: 20%


Demo Questions

Question 1
If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

  • A: The Services field prevents SNAT and DNAT from being combined in the same policy.
  • B: The Services field is used when you need to bundle several VIPs into VIP groups.
  • C: The Services field removes the requirement to create multiple VIPs for different services.
  • D: The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer.

Question 2
Which of the following statements about central NAT are true? (Choose two.)

  • A: IP tool references must be removed from existing firewall policies before enabling central NAT.
  • B: Central NAT can be enabled or disabled from the CLI only.
  • C: Source NAT, using central NAT, requires at least one central SNAT policy.
  • D: Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

Question 3
Examine the exhibit, which shows the partial output of an IKE real-time debug. 

Which of the following statement about the output is true?

  • A: The VPN is configured to use pre-shared key authentication.
  • B: Extended authentication (XAuth) was successful.
  • C: Remote is the host name of the remote IPsec peer.
  • D: Phase 1 went down. 

Question 4
An administrator is configuring an antivirus profiles on FortiGate and notices that Proxy Options is not listed under Security Profiles on the GUI. What can cause this issue?

  • A: FortiGate needs to be switched to NGFW mode.
  • B: Proxy options section is hidden by default and needs to be enabled from the Feature Visibility menu.
  • C: Proxy options are no longer available starting in FortiOS 5.6.
  • D: FortiGate is in flow-based inspection mode.

Question 5
Which of the following services can be inspected by the DLP profile? (Choose three.)

  • A: NFS
  • B: FTP
  • C: IMAP
  • D: CIFS

Question 6
Examine the following web filtering log. 


Which statement about the log message is true? 

  • A: The action for the category Games is set to block.
  • B: The usage quota for the IP address has expired
  • C: The name of the applied web filter profile is default.
  • D: The web site matches a static URL filter whose action is set to Warning.

Question 7
If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does FortiGate take?

  • A: It notifies the administrator by sending an email.
  • B: It provides a DLP block replacement page with a link to download the file.
  • C: It blocks all future traffic for that IP address for a configured interval.
  • D: It archives the data for that IP address.

Question 8
An administration wants to throttle the total volume of SMTP sessions to their email server. Which of the following DoS sensors can be used to achieve this?

  • A: tcp_port_scan
  • B: ip_dst_session
  • C: udp_flood
  • D: ip_src_session

Question 9
View the certificate shown to the exhibit, and then answer the following question: 


The CA issued this certificate to which entity?

  • A: A root CA 
  • B: A person
  • C: A bridge CA
  • D: A subordinate CA

Question 10
What information is flushed when the chunk-size value is changed in the config dlp settings?

  • A: The database for DLP document fingerprinting
  • B: The supported file types in the DLP filters
  • C: The archived files and messages
  • D: The file name patterns in the DLP filters



You can buy ProfExam with a 20% discount..

Get Now!


Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen


Use VCE Exam Simulator to open VCE files