NSE4_FGT-6.2 Fortinet NSE4 - FortiOS 6.2 Practice Questions

Only digital certificates will be accepted as an authentication method in phase 1.

Phase 1 negotiations will skip preshared key exchange.

Dialup clients must provide their local ID during phase 2 negotiations.

Dialup clients must provide a username and password for authentication

Select the format boot device option from the BIOS menu.

Load the hardware test (HQIP) image.

Load a debug FortiOS image.

Execute the CLI command execute formatlogdisk.

The collector agent uses a Windows API to query DCs for user logins.

The NetSessionEnum function is used to track user logoffs.

The collector agent does not need to search any security event logs.

WMI polling can increase bandwidth usage in large network

Configure fortinet.com access to bypass the IPS engin

Implement firewall authentication for all users that need access to fortinet.com

Manually install the FortiGate deep inspection certificate as a trusted CA

Configure an SSL-inspection exemption for fortinet.co

FortiGate regenerates the algorithm based on the login credentials and compares it to the algorithm stored on the LDAP server.

FortiGate queries its own database for credentials.

FortiGate queries the LDAP server for credentials.

FortiGate sends the user-entered credentials to the LDAP server for authentication.

It is a hard timeout. The FortiGate removes the temporary policy for a user’s source IP address after this timer has expired.

It is a hard timeout. The FortiGate removes the temporary policy for a user’s source MAC address after this timer has expired.

It is an idle timeout. The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source MAC.

It is an idle timeout. The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source IP.