NSE4_FGT_60 questions • Exam prepare

fortinet NSE4_FGT_60

Custom view settings

Exam contains 127 questions

Page 18 of 22

Question 103 🔥

Which statement about DLP on FortiGate is true?

Which database solution meets these requirements?

A. It can archive files and messages.

B. It can be applied to a firewall policy in a flow-based VDOM

C. Traffic shaping can be applied to DLP sensors.

D. Files can be sent to FortiSandbox for detecting DLP threats.

Discussion of the question

Question 104 🔥

Examine this PAC file configuration.Which of the following statements are true? (Choose two.)

Which database solution meets these requirements?

A. Browsers can be configured to retrieve this PAC file from the FortiGate.

B. Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.

C. All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.

D. Any web request fortinet.com is allowed to bypass the proxy.

Discussion of the question

Question 105 🔥

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Which database solution meets these requirements?

A. The firmware image must be manually uploaded to each FortiGate.

B. Only secondary FortiGate devices are rebooted.

Highly voted

C. Uninterruptable upgrade is enabled by default.

D. Traffic load balancing is temporally disabled while upgrading the firmware.

Highly voted

Discussion of the question

Question 106 🔥

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Which database solution meets these requirements?

A. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.

Highly voted

B. ADVPN is only supported with IKEv2.

C. Tunnels are negotiated dynamically between spokes.

Highly voted

D. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

Discussion of the question

Question 107 🔥

An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark Port Forward. What step is required for this configuration?

Which database solution meets these requirements?

A. Configure an SSL VPN realm for clients to use the port forward bookmark.

B. Configure the client application to forward IP traffic through FortiClient.

C. Configure the virtual IP address to be assigned t the SSL VPN users.

D. Configure the client application to forward IP traffic to a Java applet proxy.

Discussion of the question

Question 108 🔥

What FortiGate configuration is required to actively prompt users for credentials?

Which database solution meets these requirements?

A. You must enable one or more protocols that support active authentication on a firewall policy.

B. You must position the firewall policy for active authentication before a firewall policy for passive authentication

C. You must assign users to a group for active authentication

Highly voted

D. You must enable the Authentication setting on the firewall policy

Discussion of the question

Ready to Pass Your Certification Test

fortinet NSE4_FGT_60

Exam contains 127 questions

Lorem ipsum dolor sit amet consectetur. Eget sed turpis aenean sit aenean. Integer at nam ullamcorper a.

Company

Product

Resources

Follow us