최신 NSE4_FGT-6.2 무료덤프 - Fortinet NSE 4

문제1

Which statement about a One-to-One IP pool is true?

A. It does not use port address translation.

B. It limits the client to 64 connections per IP pool.

C. It is used for destination NAT.

D. It allows the fixed mapping of an internal address range to an external address range.

정답: A

문제2

You have tasked to design a new IPsec deployment with the following criteria:
* All satellite offices must connect to the two HQ sites.
* The satellite offices do not need to communicate directly with other satellite offices.
* Backup VPN is not required.
* The design should minimize the number of tunnels being configured.
Which topology should be used to satisfy all of the requirements?

A. Fully meshed

B. Hub-and-spoke

C. Redundant

D. Partial mesh

정답: B

문제3

What information is flushed when the chunk-size value is changed in the config dlp settings?

A. The file name patterns in the DLP filters

B. The database for DLP document fingerprinting

C. The supported file types in the DLP filters

D. The archived files and messages

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

A. To delete intermediary NAT devices in the tunnel path.

B. To dynamically change phase 1 negotiation mode aggressive mode.

C. To force a new DH exchange with each phase 2 rekey.

D. To encapsulation ESP packets in UDP packets using port 4500.

정답: A,D

문제5

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

A. Connections are tracked using source port and source MAC address.

B. This is known as many-to-one NAT.

C. Port address translation is not used.

D. Source IP is translated to the outgoing interface IP.

정답: B,D

문제6

Which statements about HA for FortiGate devices are true? (Choose two.)

A. Heartbeat interfaces are not required on the primary device.

B. HA management interface settings are synchronized between cluster members.

C. Sessions handled by proxy-based security profiles cannot be synchronized.

D. Virtual clustering can be configured between two FortiGate devices that have multiple VDOMs.

정답: C,D

문제7

What FortiGate components are tested during the hardware test? (Choose three.)

정답: A,C,D

문제8

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

A. Only secondary FortiGate devices are rebooted.

B. Uninterruptable upgrade is enabled by default.

C. Traffic load balancing is temporally disabled while upgrading the firmware.

D. The firmware image must be manually uploaded to each FortiGate.

정답: B,C

문제9

You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

A. Role: Security Fabric.

B. Device detection enabled.

C. IP/Network Mask.

D. Administrative Access: FortiTelemetry.

정답: C,D

문제10

Which statement is true regarding the policy ID number of a firewall policy?

A. Required to modify a firewall policy using the CLI.

B. Defines the order in which rules are processed.

C. Changes when firewall policies are reordered.

D. Represents the number of objects used in the firewall policy.

정답: A

최신 NSE4_FGT-6.2 무료덤프 - Fortinet NSE 4 - FortiOS 6.2

우리와 연락하기

유용한 링크

최신 업데이트