Fortinet NSE4 - FortiOS 6.0

1.

Which statement about FortiGuard services for FortiGate is true?

The web filtering database is downloaded locally on FortiGate. Antivirus signatures are downloaded locally on FortiGate. FortiGate downloads IPS updates using UDP port 53 or 8888. FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.

2.

Which statement is true regarding the policy ID number of a firewall policy?

Defines the order in which rules are processed. Represents the number of objects used in the firewall policy. Required to modify a firewall policy using the CLI. Changes when firewall policies are reordered.

3.

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

The public key of the web server certificate must be installed on the browser. The web-server certificate must be installed on the browser. The CA certificate that signed the web-server certificate must be installed on the browser. The private key of the CA certificate that signed the browser certificate must be installed on the browser.

4.

When using SD-WAN, how do you configure the next-hop gateway address for a member interface so that FortiGate can forward Internet traffic?

It must be configured in a static route using the sdwan virtual interface. It must be provided in the SD-WAN member interface configuration. It must be configured in a policy-route using the sdwan virtual interface. It must be learned automatically through a dynamic routing protocol.

5.

Which one of the following processes is involved in updating IPS from FortiGuard?

FortiGate IPS update requests are sent using UDP port 443. Protocol decoder update requests are sent to service.fortiguard.net. IPS signature update requests are sent to update.fortiguard.net. IPS engine updates can only be obtained using push updates.

6.

How does FortiGate select the central SNAT policy that is applied to a TCP session?

It selects the SNAT policy specified in the configuration of the outgoing interface. It selects the first matching central SNAT policy, reviewing from top to bottom. It selects the central SNAT policy with the lowest priority. It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.

7.

NGFW mode allows policy-based configuration for most inspection rules. Which security profiles configuration does not change when you enable policy-based inspection?

Web filtering Antivirus Web proxy Application control

8.

During the digital verification process, comparing the original and fresh hash results satisfies which security requirement?

Authentication. Data integrity. Non-repudiation. Signature verification.

9.

An administration wants to throttle the total volume of SMTP sessions to their email server. Which of the following DoS sensors can be used to achieve this?

tcp_port_scan ip_dst_session udp_flood ip_src_session

10.

Why must you use aggressive mode when a local FortiGate IPSec gateway hosts multiple dialup tunnels?

In aggressive mode, the remote peers are able to provide their peer IDs in the first message. FortiGate is able to handle NATed connections only in aggressive mode. FortiClient only supports aggressive mode. Main mode does not support XAuth for user authentication.

Fortinet NSE4 - FortiOS 6.0

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet NSE4 - FortiOS 6.0

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner