NSE4_FGT_62 questions • Exam prepare

fortinet NSE4_FGT_62

Custom view settings

Exam contains 119 questions

Page 16 of 20

Question 91 🔥

Which two statements about HA for FortiGate devices are true? (Choose two.)

Which database solution meets these requirements?

A. Virtual clustering can be configured between two FortiGate devices that have multiple VDOMs.

Highly voted

B. HA management interface settings are synchronized between cluster members.

C. Heartbeat interfaces are not required on the primary device.

D. Sessions handled by proxy-based security profiles cannot be synchronized.

Highly voted

Discussion of the question

Question 92 🔥

How can you block or allow access to Twitter using a firewall policy?

Which database solution meets these requirements?

A. Configure the Service field as Internet Service objects for Twitter.

B. Configure the Source field as Internet Service objects for Twitter

C. Configure the Action field as Learn and select Twitter.

D. Configure the Destination field as Internet Service objects for Twitter.

Highly voted

Discussion of the question

Question 93 🔥

Which statement about FortiGuard services for FortiGate is true?

Which database solution meets these requirements?

A. The web filtering database is downloaded locally on FortiGate.

B. FortiGate downloads IPS updates using UDP port 53 or 8888.

C. Antivirus signatures are downloaded locally on FortiGate.

Highly voted

D. FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.

Discussion of the question

Question 94 🔥

How does FortiGate verify the login credentials of a remote LDAP user?

Which database solution meets these requirements?

A. FortiGate queries its own database for credentials.

B. FortiGate queries the LDAP server for credentials.

C. FortiGate sends the user-entered credentials to the LDAP server for authentication.

Highly voted

D. FortiGate regenerates the algorithm based on the login credentials and compares it to the algorithm stored on the LDAP server.

Discussion of the question

Question 95 🔥

When using SD-WAN, how must you configure a next-hop gateway address for a member interface, so that FortiGate can forward Internet traffic?

Which database solution meets these requirements?

A. It must be configured in a policy route using the sdwan virtual interface.

B. It must be learned automatically through a dynamic routing protocol.

C. It must be configured in a static route using the sdwan virtual interface.

D. It must be provided in the SD-WAN member interface configuration.

Highly voted

Discussion of the question

Question 96 🔥

Which statement about the FSSO collector agent timers is true?

Which database solution meets these requirements?

A. The workstation verify interval is used to periodically check if a workstation is still a domain member.

B. The dead entry timeout interval is used to age out entries with an unverified status.

Highly voted

C. The user group cache expiry is used to age out the monitored groups.

D. The IP address change verify interval monitors the server IP address where the collector agent is installed.

Discussion of the question

Ready to Pass Your Certification Test

fortinet NSE4_FGT_62

Exam contains 119 questions

Lorem ipsum dolor sit amet consectetur. Eget sed turpis aenean sit aenean. Integer at nam ullamcorper a.

Company

Product

Resources

Follow us