Create Next App

fortinet NSE4_FGT_60

Exam contains 127 questions

Page 10 of 22

Question 55 🔥

How does FortiGate verify the login credentials of a remote LDAP user?

Which database solution meets these requirements?

A. FortiGate regenerates the algorithm based on the login credentials and compares it to the algorithm stored on the LDAP server.

Highly voted

B. FortiGate sends the user-entered credentials to the LDAP server for authentication.

Highly voted

C. FortiGate queries the LDAP server for credentials.

Highly voted

D. FortiGate queries its own database for credentials.

Highly voted

Discussion of the question

Question 56 🔥

Which action can be applied to each filter in the application control profile?

Which database solution meets these requirements?

A. Block, monitor, warning, and quarantine

Highly voted

B. Allow, monitor, block and learn

Highly voted

C. Allow, block, authenticate, and warning

Highly voted

D. Allow, monitor, block, and quarantine

Highly voted

Discussion of the question

Question 57 🔥

View the exhibit.Based on the configuration shown in the exhibit, what statements about application control behavior are true? (Choose two.)

Which database solution meets these requirements?

A. Access to all unknown applications will be allowed.

Highly voted

B. Access to browser-based Social.Media applications will be blocked.

Highly voted

C. Access to mobile social media applications will be blocked.

Highly voted

D. Access to all applications in Social.Media category will be blocked.

Highly voted

Discussion of the question

Question 58 🔥

HTTP Public Key Pinning (HPKP) can be an obstacle to implementing full SSL inspection. What solutions could resolve this problem? (Choose two.)

Which database solution meets these requirements?

A. Enable Allow Invalid SSL Certificates for the relevant security profile.

Highly voted

B. Change web browsers to one that does not support HPKP.

Highly voted

C. Exempt those web sites that use HPKP from full SSL inspection.

Highly voted

D. Install the CA certificate (that is required to verify the web server certificate) stores of users' computers.

Highly voted

Discussion of the question

Question 59 🔥

View the exhibit.What does this raw log indicate? (Choose two.)

Which database solution meets these requirements?

A. FortiGate blocked the traffic.

Highly voted

B. type indicates that a security event was recorded.

Highly voted

C. 10.0.1.20 is the IP address for lavito.tk.

Highly voted

D. policyid indicates that traffic went through the IPS firewall policy.

Highly voted

Discussion of the question

Question 60 🔥

What files are sent to FortiSandbox for inspection in flow-based inspection mode?

Which database solution meets these requirements?

C. All suspicious files that match patterns defined in the antivirus profile.

Highly voted

A. All suspicious files that do not have their hash value in the FortiGuard antivirus signature database.

Highly voted

B. All suspicious files that are above the defined oversize limit value in the protocol options.

Highly voted

D. All suspicious files that are allowed to be submitted to FortiSandbox in the antivirus profile.

Highly voted

Discussion of the question

Ready to Pass Your Certification Test

fortinet NSE4_FGT_60

Exam contains 127 questions

Lorem ipsum dolor sit amet consectetur. Eget sed turpis aenean sit aenean. Integer at nam ullamcorper a.

Company

Product

Resources

Follow us