最新的Fortinet NSE 4認證 NSE4_FGT-6.2考試題庫

問題1

Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

A. Extended authentication (XAuth) was successful.

B. The VPN is configured to use pre-shared key authentication.

C. Phase 1 went down.

D. Remote is the host name of the remote IPsec peer.

正確答案: B

問題2

Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

A. 10.4.200.0/30 is directly connected, port2

B. 172.16.32.0/24 is directly connected, port1

C. 0.0.0.0/0 [20/0] via 10.4.200.2, port2

D. 172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]

正確答案: B

問題3

NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?

A. Antivirus

B. Application control

C. Web filtering

D. Web proxy

正確答案: A

問題4

What files are sent to FortiSandbox for inspection in flow-based inspection mode?

A. All suspicious files that do not have their hash value in the FortiGuard antivirus signature database.

B. All suspicious files that are allowed to be submitted to FortiSandbox in the antivirus profile.

C. All suspicious files that are above the defined oversize limit value in the protocol options.

D. All suspicious files that match patterns defined in the antivirus profile.

正確答案: D

問題5

Which statements about a One-to-One IP pool are true? (Choose two.)

A. It allows the fixed mapping of an internal address range to an external address range.

B. It is used for destination NAT.

C. It allows the configuration of ARP replies.

D. It does not use port address translation.

正確答案: C,D

問題6

How do you format the FortiGate flash disk?

A. Load the hardware test (HQIP) image.

B. Select the format boot device option from the BIOS menu.

C. Load a debug FortiOS image.

D. Execute the CLI command execute formatlogdisk.

正確答案: B

問題7

Examine the following web filtering log.

Which statement about the log message is true?

A. The action for the category Games is set to block.

B. The web site miniclip.com matches a static URL filter whose action is set to Warning.

C. The usage quota for the IP address 10.0.1.10 has expired

D. The name of the applied web filter profile is default.

正確答案: D

問題8

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

A. The firmware image must be manually uploaded to each FortiGate.

B. Traffic load balancing is temporally disabled while upgrading the firmware.

C. Only secondary FortiGate devices are rebooted.

D. Uninterruptable upgrade is enabled by default.

正確答案: B,D

最新的Fortinet NSE 4 - FortiOS 6.2 - NSE4_FGT-6.2免費考試真題

最新更新

站內鏈接

聯系我們