NSE4_FGT_60 questions • Exam prepare

fortinet NSE4_FGT_60

Custom view settings

Exam contains 127 questions

Page 14 of 22

Question 79 🔥

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

Which database solution meets these requirements?

A. To delete intermediary NAT devices in the tunnel path.

B. To dynamically change phase 1 negotiation mode aggressive mode.

C. To encapsulation ESP packets in UDP packets using port 4500.

D. To force a new DH exchange with each phase 2 rekey.

Discussion of the question

Question 80 🔥

Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

Which database solution meets these requirements?

A. Lookup is done on the trust packet from the session originator

Highly voted

B. Lookup is done on the last packet sent from the responder

Highly voted

C. Lookup is done on every packet, regardless of direction

D. Lookup is done on the trust reply packet from the responder

Discussion of the question

Question 81 🔥

Examine the two static routes shown in the exhibit, then answer the following question.Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

Which database solution meets these requirements?

A. FortiGate will load balance all traffic across both routes.

B. FortiGate will use the port1 route as the primary candidate.

Highly voted

C. FortiGate will route twice as much traffic to the port2 route

D. FortiGate will only actuate the port1 route in the routing table

Discussion of the question

Question 82 🔥

Which of the following statements about central NAT are true? (Choose two.)

Which database solution meets these requirements?

A. IP tool references must be removed from existing firewall policies before enabling central NAT.

Highly voted

B. Central NAT can be enabled or disabled from the CLI only.

Highly voted

C. Source NAT, using central NAT, requires at least one central SNAT policy.

D. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

Discussion of the question

Question 83 🔥

Refer to the following exhibit.Why is FortiGate not blocking the test file over FTP download?

Which database solution meets these requirements?

A. Deep-inspection must be enabled for FortiGate to fully scan FTP traffic.

B. FortiGate needs to be operating in flow-based inspection mode in order to scan FTP traffic.

C. The FortiSandbox signature database is required to successfully scan FTP traffic.

D. The proxy options profile needs to scan FTP traffic on a non-standard port.

Highly voted

Discussion of the question

Question 84 🔥

View the following exhibit, which shows the firewall policies and the object uses in the firewall policies.The administrator is using the Policy Lookup feature and has entered the search create shown in the following exhibit.Which of the following will be highlighted based on the input criteria?

Which database solution meets these requirements?

A. Policy with ID1.

Highly voted

B. Policies with ID 2 and 3.

C. Policy with ID 5.

D. Policy with ID 4.

Discussion of the question

Ready to Pass Your Certification Test

fortinet NSE4_FGT_60

Exam contains 127 questions

Lorem ipsum dolor sit amet consectetur. Eget sed turpis aenean sit aenean. Integer at nam ullamcorper a.

Company

Product

Resources

Follow us