Fortinet NSE 4 - FortiOS 6.2 - NSE4_FGT-6.2 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which statements about DNS filter profiles are true? (Choose two.)

A. They must be applied in firewall policies with SSL inspection enabled. B. They can inspect HTTP traffic. C. They can block DNS requests to known botnet command and control servers. D. They can redirect blocked requests to a specific portal.

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

View the exhibit:

Which the FortiGate handle web proxy traffic rue? (Choose two.)

A. port-VLAN1 is the native VLAN for the port1 physical interface. B. Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10. C. port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs. D. Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.

Discussion 0

Correct Answer: B,C Vote an answer

Question 3

Which statement is true regarding the policy ID number of a firewall policy?

A. Defines the order in which rules are processed. B. Represents the number of objects used in the firewall policy. C. Required to modify a firewall policy using the CLI. D. Changes when firewall policies are reordered.

Discussion 0

Correct Answer: C Vote an answer

Question 4

Which statement regarding the firewall policy authentication timeout is true?

A. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP. B. It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired. C. It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired. D. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.

Discussion 0

Correct Answer: A Vote an answer

Question 5

An administrator has configured central DNAT and virtual IPs. Which of the following can be selected in the firewall policy Destination field?

A. A VIP group B. A VIP object C. An IP pool D. The mapped IP address object of the VIP object

Discussion 0

Correct Answer: D Vote an answer

Question 6

When using SD-WAN, how do you configure the next-hop gateway address for a member interface so that FortiGate can forward Internet traffic?

A. It must be provided in the SD-WAN member interface configuration. B. It must be configured in a static route using the sdwan virtual interface. C. It must be learned automatically through a dynamic routing protocol. D. It must be configured in a policy-route using the sdwan virtual interface.

Discussion 0

Correct Answer: A Vote an answer

Question 7

Which Statements about virtual domains (VDOMs) arc true? (Choose two.)

A. Each VDOM can be configured with different system hostnames. B. Transparent mode and NAT/Route mode VDOMs cannot be combined on the same FortiGate. C. Different VLAN sub-interface of the same physical interface can be assigned to different VDOMs. D. Each VDOM has its own routing table.

Discussion 0

Correct Answer: C,D Vote an answer