30 August, 2020

Up To The Minute Fortinet NSE 4 - FortiOS 6.2 NSE4_FGT-6.2 Sample Question

Testking offers free demo for NSE4_FGT-6.2 exam. "Fortinet NSE 4 - FortiOS 6.2", also known as NSE4_FGT-6.2 exam, is a Fortinet Certification. This set of posts, Passing the Fortinet NSE4_FGT-6.2 exam, will help you answer those questions. The NSE4_FGT-6.2 Questions & Answers covers all the knowledge points of the real exam. 100% real Fortinet NSE4_FGT-6.2 exams and revised by experts!

Free NSE4_FGT-6.2 Demo Online For Fortinet Certifitcation:

Page: 1 / 10

Total 129 questions Full Exam Access

Question 1

Which is the correct description of a hash result as it relates to digital certificates?

A unique value used to verify the input data

An output value that is used to identify the person or deduce that authored the input data.

An obfuscation used to mask the input data.

An encrypted output value used to safe-guard the input data

Question 2

Which statement is true regarding SSL VPN timers? (Choose two.)

Allow to mitigate DoS attacks from partial HTTP requests.

SSL VPN settings do not have customizable timers.

Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.

Prevent SSL VPN users from being logged out because of high network latency.

Question 3

Examine the network diagram shown in the exhibit, then answer the following question:
NSE4_FGT-6.2 dumps exhibit

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]

0.0.0.0/0 [20/0] via 10.4.200.2, port2

10.4.200.0/30 is directly connected, port2

172.16.32.0/24 is directly connected, port1

Question 4

View the following exhibit, which shows the firewall policies and the object uses in the firewall policies.
NSE4_FGT-6.2 dumps exhibit

The administrator is using the Policy Lookup feature and has entered the search create shown in the following exhibit.
NSE4_FGT-6.2 dumps exhibit

Which of the following will be highlighted based on the input criteria?

Policy with ID1.

Policies with ID 2 and 3.

Policy with ID 5.

Policy with ID 4.

Question 5

An administrator is configuring an antivirus profiles on FortiGate and notices that Proxy Options is not listed under Security Profiles on the GUI. What can cause this issue?

FortiGate needs to be switched to NGFW mode.

Proxy options section is hidden by default and needs to be enabled from the Feature Visibility menu.

Proxy options are no longer available starting in FortiOS 5.6.

FortiGate is in flow-based inspection mode.

Question 6

Which of the following statements describe WMI polling mode for the FSSO collector agent? (Choose two.)

The NetSessionEnum function is used to track user logoffs.

WMI polling can increase bandwidth usage in large networks.

The collector agent uses a Windows API to query DCs for user logins.

The collector agent do not need to search any security event logs.

Question 7

View the exhibit:
NSE4_FGT-6.2 dumps exhibit

Whichhe FortiGate handle web proxy traffic rue? (Choose two.)

Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.

port-VLAN1 is the native VLAN for the port1 physical interface.

port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.

Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.

Question 8

Which of the following statements about virtual domains (VDOMs) are true? (Choose two.)

The root VDOM is the management VDOM by default.

A FortiGate device has 64 VDOMs, created by default.

Each VDOM maintains its own system time.

Each VDOM maintains its own routing table.

Question 9

An employee connects to the https://example.com on the Internet using a web browser. The web server’s certificate was signed by a private internal CA. The FortiGate that is inspecting this traffic is configured for full SSL inspection.
This exhibit shows the configuration settings for the SSL/SSH inspection profile that is applied to the policy that is invoked in this instance. All other settings are set to defaults. No certificates have been imported into FortiGate. View the exhibit and answer the question that follows.
NSE4_FGT-6.2 dumps exhibit

Which certificate is presented to the employee’s web browser?

The web server’s certificate.

The user’s personal certificate signed by a private internal CA.

A certificate signed by Fortinet_CA_SSL.

A certificate signed by Fortinet_CA_Untrusted.

Question 10

Examine this output from a debug flow:
NSE4_FGT-6.2 dumps exhibit

Why did the FortiGate drop the packet?

The next-hop IP address is unreachable.

It failed the RPF check.

It matched an explicitly configured firewall policy with the action DENY.

It matched the default implicit firewall policy.

Question 11

Which statement is true regarding the policy ID number of a firewall policy?

Defines the order in which rules are processed.

Represents the number of objects used in the firewall policy.

Required to modify a firewall policy using the CLI.

Changes when firewall policies are reordered.

Question 12

Which of the following FortiGate configuration tasks will create a route in the policy route table? (Choose two.)

Static route created with a Named Address object

Static route created with an Internet Services object

SD-WAN route created for individual member interfaces

SD-WAN rule created to route traffic based on link latency

Question 13

Which statements about HA for FortiGate devices are true? (Choose two.)

Sessions handled by proxy-based security profiles cannot be synchronized.

Virtual clustering can be configured between two FortiGate devices that have multiple VDOMs.

HA management interface settings are synchronized between cluster members.

Heartbeat interfaces are not required on the primary device.

Question 14

Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.
NSE4_FGT-6.2 dumps exhibit

What are the expected actions if traffic matches this IPS sensor? (Choose two.)

The sensor will gather a packet log for all matched traffic.

The sensor will not block attackers matching the A32S.Botnet signature.

The sensor will block all attacks for Windows servers.

The sensor will reset all connections that match these signatures.

Question 15

What information is flushed when the chunk-size value is changed in the config dlp settings?

The database for DLP document fingerprinting

The supported file types in the DLP filters

The archived files and messages

The file name patterns in the DLP filters

Question 16

Which statement regarding the firewall policy authentication timeout is true?

It is an idle timeou

The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source IP.

It is a hard timeou

The FortiGate removes the temporary policy for a user’s source IP address after this timer has expired.

It is an idle timeou

The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source MAC.

It is a hard timeou

The FortiGate removes the temporary policy for a user’s source MAC address after this timer has expired.

Question 17

Which statement best describes the role of a DC agent in an FSSO DC agent mode solution? Response:

Captures the logon events and forwards them to FortiGate.

Captures the logon events and forwards them to the collector agent.

Captures the logon and logoff events and forwards them to the collector agent.

Captures the user IP address and workstation name and forwards them to FortiGate.

Question 18

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

To remove the NAT operation.

To generate logs

To finish any inspection operations.

To allow for out-of-order packets that could arrive after the FIN/ACK packets.

Question 19

When using WPAD DNS method, which FQDN format do browsers use to query the DNS server?

srv_proxy.<local-domain>/wpad.dat

srv_tcp.wpad.<local-domain>

wpad.<local-domain>

proxy.<local-domain>.wpad

Question 20

How does FortiGate verify the login credentials of a remote LDAP user?

FortiGate regenerates the algorithm based on the login credentials and compares it to the algorithm stored on the LDAP server.

FortiGate sends the user-entered credentials to the LDAP server for authentication.

FortiGate queries the LDAP server for credentials.

FortiGate queries its own database for credentials.

Question 21

Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

Log downloads from the GUI are limited to the current filter view

Log backups from the CLI cannot be restored to another FortiGate.

Log backups from the CLI can be configured to upload to FTP as a scheduled time

Log downloads from the GUI are stored as LZ4 compressed files.

Question 22

Which is a requirement for creating an inter-VDOM link between two VDOMs?

The inspection mode of at least one VDOM must be proxy-based.

At least one of the VDOMs must operate in NAT mode.

The inspection mode of both VDOMs must match.

Both VDOMs must operate in NAT mode.

Question 23

View the certificate shown to the exhibit, and then answer the following question:
NSE4_FGT-6.2 dumps exhibit

The CA issued this certificate to which entity?

A root CA

A person

A bridge CA

A subordinate CA

Question 24

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

Warning

Exempt

Allow

Learn

Page: 1 / 10

Total 129 questions Full Exam Access