Create Next App

fortinet NSE4_FGT_60

Exam contains 127 questions

Page 3 of 22

Question 13 🔥

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Which database solution meets these requirements?

A. The public key of the web server certificate must be installed on the browser.

Highly voted

B. The web-server certificate must be installed on the browser.

Highly voted

C. The CA certificate that signed the web-server certificate must be installed on the browser.

Highly voted

D. The private key of the CA certificate that signed the browser certificate must be installed on the browser.

Highly voted

Discussion of the question

Question 14 🔥

When using SD-WAN, how do you configure the next-hop gateway address for a member interface so that FortiGate can forward Internet traffic?

Which database solution meets these requirements?

A. It must be configured in a static route using the sdwan virtual interface.

Highly voted

B. It must be provided in the SD-WAN member interface configuration.

Highly voted

C. It must be configured in a policy-route using the sdwan virtual interface.

Highly voted

D. It must be learned automatically through a dynamic routing protocol.

Highly voted

Discussion of the question

Question 15 🔥

Which of the following services can be inspected by the DLP profile? (Choose three.)

Which database solution meets these requirements?

Discussion of the question

Question 16 🔥

Which of the following statements describe WMI polling mode for the FSSO collector agent? (Choose two.)

Which database solution meets these requirements?

A. The NetSessionEnum function is used to track user logoffs.

Highly voted

B. WMI polling can increase bandwidth usage in large networks.

Highly voted

C. The collector agent uses a Windows API to query DCs for user logins.

Highly voted

D. The collector agent do not need to search any security event logs.

Highly voted

Discussion of the question

Question 17 🔥

Which statements about DNS filter profiles are true? (Choose two.)

Which database solution meets these requirements?

A. They can inspect HTTP traffic.

Highly voted

B. They can redirect blocked requests to a specific portal.

Highly voted

C. They can block DNS requests to known botnet command and control servers.

Highly voted

D. They must be applied in firewall policies with SSL inspection enabled.

Highly voted

Discussion of the question

Question 18 🔥

What files are sent to FortiSandbox for inspection in flow-based inspection mode?

Which database solution meets these requirements?

C. All suspicious files that match patterns defined in the antivirus profile.

Highly voted

A. All suspicious files that do not have their hash value in the FortiGuard antivirus signature database.

Highly voted

B. All suspicious files that are above the defined oversize limit value in the protocol options.

Highly voted

D. All suspicious files that are allowed to be submitted to FortiSandbox in the antivirus profile.

Highly voted

Discussion of the question

Ready to Pass Your Certification Test

fortinet NSE4_FGT_60

Exam contains 127 questions

Lorem ipsum dolor sit amet consectetur. Eget sed turpis aenean sit aenean. Integer at nam ullamcorper a.

Company

Product

Resources

Follow us