22 April, 2024

How Many Questions Of NSE4_FGT-6.2 Dumps Questions

Act now and download your Fortinet NSE4_FGT-6.2 test today! Do not waste time for the worthless Fortinet NSE4_FGT-6.2 tutorials. Download Update Fortinet Fortinet NSE 4 - FortiOS 6.2 exam with real questions and answers and begin to learn Fortinet NSE4_FGT-6.2 with a classic professional.

Fortinet NSE4_FGT-6.2 Free Dumps Questions Online, Read and Test Now.

Page: 1 / 10

Total 129 questions Full Exam Access

Question 1

Which is a requirement for creating an inter-VDOM link between two VDOMs?

The inspection mode of at least one VDOM must be proxy-based.

At least one of the VDOMs must operate in NAT mode.

The inspection mode of both VDOMs must match.

Both VDOMs must operate in NAT mode.

Question 2

If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does FortiGate take?

It notifies the administrator by sending an email.

It provides a DLP block replacement page with a link to download the file.

It blocks all future traffic for that IP address for a configured interval.

It archives the data for that IP address.

Question 3

Which of the following statements about the FSSO collector agent timers is true?

The workstation verify interval is used to periodically check of a workstation is still a domain member.

The IP address change verify interval monitors the server IP address where the collector agent is installed, and the updates the collector agent configuration if it changes.

The user group cache expiry is used to age out the monitored groups.

The dead entry timeout interval is used to age out entries with an unverified status.

Question 4

Which statement regarding the firewall policy authentication timeout is true?

It is an idle timeou

The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source IP.

It is a hard timeou

The FortiGate removes the temporary policy for a user’s source IP address after this timer has expired.

It is an idle timeou

The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source MAC.

It is a hard timeou

The FortiGate removes the temporary policy for a user’s source MAC address after this timer has expired.

Question 5

The FSSO Collector Agent set to advanced access mode for the Windows Active Directory uses which of the following?

LDAP convention

NTLM convention

Windows convention – NetBios\Username

RSSO convention

Question 6

An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

A phase 2 configuration is not required.

This VPN cannot be used as part of a hub-and-spoke topology.

A virtual IPsec interface is automatically created after the phase 1 configuration is completed.

The IPsec firewall policies must be placed at the top of the list.

Question 7

An administrator has configured a dialup IPsec VPN with XAuth. Which statement best describes what occurs during this scenario?

Phase 1 negotiations will skip preshared key exchange.

Only digital certificates will be accepted as an authentication method in phase 1.C

Dialup clients must provide a username and password for authentication.

Dialup clients must provide their local ID during phase 2 negotiations.

Question 8

How can you block or allow to Twitter using a firewall policy?

Configure the Destination field as Internet Service objects for Twitter.

Configure the Action field as Learn and select Twitter.

Configure the Service field as Internet Service objects for Twitter.

Configure the Source field as Internet Service objects for Twitter.

Question 9

An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)

Configure split tunneling for content inspection.

Configure host restrictions by IP or MAC address.

Configure two-factor authentication using security certificates.

Configure SSL offloading to a content processor (FortiASIC).

Configure a client integrity check (host-check).

Question 10

Which of the following statements about NTLM authentication are correct? (Choose two.)

It is useful when users log in to DCs that are not monitored by a collector agent.

It takes over as the primary authentication method when configured alongside FSSO.

Multi-domain environments require DC agents on every domain controller.

NTLM-enabled web browsers are required.

Question 11

Refer to the following exhibit.
NSE4_FGT-6.2 dumps exhibit

Why is FortiGate not blocking the test file over FTP download?

Deep-inspection must be enabled for FortiGate to fully scan FTP traffic.

FortiGate needs to be operating in flow-based inspection mode in order to scan FTP traffic.

The FortiSandbox signature database is required to successfully scan FTP traffic.

The proxy options profile needs to scan FTP traffic on a non-standard port.

Question 12

What FortiGate configuration is required to actively prompt users for credentials?

You must enable one or more protocols that support active authentication on a firewall policy.

You must position the firewall policy for active authentication before a firewall policy for passive authentication

You must assign users to a group for active authentication

You must enable the Authentication setting on the firewall policy

Question 13

Examine the exhibit, which contains a session diagnostic output.
NSE4_FGT-6.2 dumps exhibit

Which of the following statements about the session diagnostic output is true?

The session is in ESTABLISHED state.

The session is in LISTEN state.

The session is in TIME_WAIT state.

The session is in CLOSE_WAIT state.

Question 14

Which of the following SD-WAN load –balancing method use interface weight value to distribute traffic? (Choose two.)

Source IP

Spillover

Volume

Session

Question 15

Which statement about FortiGuard services for FortiGate is true?

The web filtering database is downloaded locally on FortiGate.

Antivirus signatures are downloaded locally on FortiGate.

FortiGate downloads IPS updates using UDP port 53 or 8888.

FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.

Page: 1 / 10

Total 129 questions Full Exam Access