Create Next App

fortinet NSE4_FGT_60

Custom view settings

Exam contains 127 questions

Page 5 of 22

Question 25 🔥

Which one of the following processes is involved in updating IPS from FortiGuard?

Which database solution meets these requirements?

A. FortiGate IPS update requests are sent using UDP port 443.

Highly voted

B. Protocol decoder update requests are sent to service.fortiguard.net.

Highly voted

C. IPS signature update requests are sent to update.fortiguard.net.

Highly voted

D. IPS engine updates can only be obtained using push updates.

Highly voted

Discussion of the question

Question 26 🔥

How does FortiGate select the central SNAT policy that is applied to a TCP session?

Which database solution meets these requirements?

A. It selects the SNAT policy specified in the configuration of the outgoing interface.

Highly voted

B. It selects the first matching central SNAT policy, reviewing from top to bottom.

Highly voted

C. It selects the central SNAT policy with the lowest priority.

Highly voted

D. It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.

Highly voted

Discussion of the question

Question 27 🔥

Which of the following conditions are required for establishing an IPSec VPN between two FortiGate devices? (Choose two.)

Which database solution meets these requirements?

A. If XAuth is enabled as a server in one peer, it must be enabled as a client in the other peer.

Highly voted

B. If the VPN is configured as route-based, there must be at least one firewall policy with the action set to IPSec.

Highly voted

C. If the VPN is configured as DialUp User in one peer, it must be configured as either Static IP Address or Dynamic DNS in the other peer.

Highly voted

D. If the VPN is configured as a policy-based in one peer, it must also be configured as policy-based in the other peer.

Highly voted

Discussion of the question

Question 28 🔥

Which of the following statements about converse mode are true? (Choose two.)

Which database solution meets these requirements?

A. FortiGate stops sending files to FortiSandbox for inspection.

Highly voted

B. FortiGate stops doing RPF checks over incoming packets.

Highly voted

C. Administrators cannot change the configuration.

Highly voted

D. Administrators can access the FortiGate only through the console port.

Highly voted

Discussion of the question

Question 29 🔥

View the exhibit.Why is the administrator getting the error shown in the exhibit?

Which database solution meets these requirements?

A. The administrator must first enter the command edit global.

Highly voted

B. The administrator admin does not have the privileges required to configure global settings.

Highly voted

C. The global settings cannot be configured from the root VDOM context.

Highly voted

D. The command config system global does not exist in FortiGate.

Highly voted

Discussion of the question

Question 30 🔥

What files are sent to FortiSandbox for inspection in flow-based inspection mode?

Which database solution meets these requirements?

C. All suspicious files that match patterns defined in the antivirus profile.

Highly voted

A. All suspicious files that do not have their hash value in the FortiGuard antivirus signature database.

Highly voted

B. All suspicious files that are above the defined oversize limit value in the protocol options.

Highly voted

D. All suspicious files that are allowed to be submitted to FortiSandbox in the antivirus profile.

Highly voted

Discussion of the question

Ready to Pass Your Certification Test

fortinet NSE4_FGT_60

Exam contains 127 questions

Lorem ipsum dolor sit amet consectetur. Eget sed turpis aenean sit aenean. Integer at nam ullamcorper a.

Company

Product

Resources

Follow us