Download Fortinet NSE4 - FortiOS 6.0.NSE4_FGT-6.0.PassGuide.2019-05-03.45q.vcex

Vendor: Fortinet
Exam Code: NSE4_FGT-6.0
Exam Name: Fortinet NSE4 - FortiOS 6.0
Date: May 03, 2019
File Size: 2 MB
Download Exam

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAMFILESCOM

Discount: 20%

ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator

Demo Questions

Question 1
What files are sent to FortiSandbox for inspection in flow-based inspection mode?
  1. All suspicious files that do not have their hash value in the FortiGuard antivirus signature database.
  2. All suspicious files that are above the defined oversize limit value in the protocol options.
  3. All suspicious files that match patterns defined in the antivirus profile.
  4. All suspicious files that are allowed to be submitted to FortiSandbox in the antivirus profile.
Correct answer: C
Question 2
Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)
  1. Priority
  2. Metric
  3. Distance
  4. Cost
Correct answer: AC
Question 3
An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose. 
  
Where must the proxy address be used?
  1. As the source in a firewall policy.
  2. As the source in a proxy policy.
  3. As the destination in a firewall policy.
  4. As the destination in a proxy policy.
Correct answer: B
Question 4
Which statement is true regarding SSL VPN timers? (Choose two.)
  1. Allow to mitigate DoS attacks from partial HTTP requests.
  2. SSL VPN settings do not have customizable timers.
  3. Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.
  4. Prevent SSL VPN users from being logged out because of high network latency.
Correct answer: AD
Question 5
Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?
  1. The public key of the web server certificate must be installed on the browser.
  2. The web-server certificate must be installed on the browser.
  3. The CA certificate that signed the web-server certificate must be installed on the browser.
  4. The private key of the CA certificate that signed the browser certificate must be installed on the browser.
Correct answer: C
Question 6
Which of the following services can be inspected by the DLP profile? (Choose three.)
  1. NFS
  2. FTP
  3. IMAP
  4. CIFS
  5. HTTP-POST
Correct answer: BCE
Question 7
Which statements about DNS filter profiles are true? (Choose two.)
  1. They can inspect HTTP traffic.
  2. They can redirect blocked requests to a specific portal.
  3. They can block DNS requests to known botnet command and control servers.
  4. They must be applied in firewall policies with SSL inspection enabled.
Correct answer: BC
Question 8
Which of the following statements about virtual domains (VDOMs) are true? (Choose two.)
  1. The root VDOM is the management VDOM by default.
  2. A FortiGate device has 64 VDOMs, created by default.
  3. Each VDOM maintains its own system time.
  4. Each VDOM maintains its own routing table.
Correct answer: AD
Question 9
You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:
  
When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)
  1. Device detection enabled.
  2. Administrative Access: FortiTelemetry.
  3. IP/Network Mask.
  4. Role: Security Fabric.
Correct answer: BC
Question 10
Which statements correctly describe transparent mode operation? (Choose three.)
  1. All interfaces of the transparent mode FortiGate device must be on different IP subnets.
  2. Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.
  3. The transparent FortiGate is visible to network hosts in an IP traceroute.
  4. It permits inline traffic inspection and firewalling without changing the IP scheme of the network.
  5. FortiGate acts as transparent bridge and forwards traffic at Layer 2.
Correct answer: BDE
CONNECT US
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!