최신 NSE4_FGT-6.2 무료덤프 - Fortinet NSE 4

문제1

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

A. Learn

B. Warning

C. Allow

D. Exempt

정답: B,C

문제2

When override is enabled, which of the following shows the process and selection criteria that are used to elect the primary FortiGate in an HA cluster?

A. Connected monitored ports > priority > HA uptime > serial number

B. HA uptime > priority > Connected monitored ports > serial number

C. Priority > Connected monitored ports > HA uptime > serial number

D. Connected monitored ports > HA uptime > priority > serial number

정답: A

문제3

How can you block or allow to Twitter using a firewall policy?

A. Configure the Service field as Internet Service objects for Twitter.

B. Configure the Source field as Internet Service objects for Twitter.

C. Configure the Action field as Learn and select Twitter.

D. Configure the Destination field as Internet Service objects for Twitter.

정답: D

문제4

An administrator is configuring an antivirus profiles on FortiGate and notices that Proxy Options is not listed under Security Profiles on the GUI. What can cause this issue?

A. FortiGate needs to be switched to NGFW mode.

B. Proxy options section is hidden by default and needs to be enabled from the Feature Visibility menu.

C. Proxy options are no longer available starting in FortiOS 5.6.

D. FortiGate is in flow-based inspection mode.

정답: D

문제5

An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)

A. Configure host restrictions by IP or MAC address.

B. Configure a client integrity check (host-check).

C. Configure two-factor authentication using security certificates.

D. Configure SSL offloading to a content processor (FortiASIC).

E. Configure split tunneling for content inspection.

정답: A,B,C

문제6

What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

A. It limits the scope of application control to scan application traffic on DNS protocol only.

B. It limits the scope of application control to scan application traffic using parent signatures only

C. It limits the scope of application control to scan application traffic based on application category only.

D. It limits the scope of application control to the browser-based technology category only.

정답: C

문제7

You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

A. Role: Security Fabric.

B. Device detection enabled.

C. IP/Network Mask.

D. Administrative Access: FortiTelemetry.

정답: C,D

문제8

Which statements about HA for FortiGate devices are true? (Choose two.)

A. Heartbeat interfaces are not required on the primary device.

B. HA management interface settings are synchronized between cluster members.

C. Sessions handled by proxy-based security profiles cannot be synchronized.

D. Virtual clustering can be configured between two FortiGate devices that have multiple VDOMs.

정답: C,D

문제9

Which statement best describes the role of a DC agent in an FSSO DC agent mode solution?
Response:

A. Captures the logon and logoff events and forwards them to the collector agent.

B. Captures the logon events and forwards them to FortiGate.

C. Captures the user IP address and workstation name and forwards them to FortiGate.

D. Captures the logon events and forwards them to the collector agent.

정답: D

문제10

Which is a requirement for creating an inter-VDOM link between two VDOMs?

A. The inspection mode of at least one VDOM must be proxy-based.

B. At least one of the VDOMs must operate in NAT mode.

C. Both VDOMs must operate in NAT mode.

D. The inspection mode of both VDOMs must match.

정답: B

최신 NSE4_FGT-6.2 무료덤프 - Fortinet NSE 4 - FortiOS 6.2

우리와 연락하기

유용한 링크

최신 업데이트