NSE4_FGT-6.4 sample questions

Question 1

Refer to the exhibit to view the firewall policy. Which statement is correct if well-known viruses are not being blocked?

Accepted Answer

Web filter should be enabled on the firewall policy to complement the antivirus profile.

Answer

The firewall policy does not apply deep content inspection.

Answer

The firewall policy must be configured in proxy-based inspection mode.

Answer

The action on the firewall policy must be set to deny.

Question 2

Refer to the exhibit.

The exhibit contains a network interface configuration, firewall policies, and a CLI console configuration.

How will FortiGate handle user authentication for traffic that arrives on the LAN interface?

Accepted Answer

If there is a full-through policy in place, users will not be prompted for authentication.

Answer

Users from the Sales group will be prompted for authentication and can authenticate successfully with the correct credentials.

Answer

Authentication is enforced at a policy level; all users will be prompted for authentication.

Answer

Users from the HR group will be prompted for authentication and can authenticate successfully with the correct credentials.

Question 3

Refer to the FortiGuard connection debug output. Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

Accepted Answer

One server was contacted to retrieve the contract information.

Accepted Answer

There is at least one server that lost packets consecutively.

Answer

A local FortiManager is one of the servers FortiGate communicates with.

Answer

FortiGate is using default FortiGuard communication settings.

Question 4

What is the primary FortiGate election process when the HA override setting is disabled?

Accepted Answer

Connected monitored ports > HA uptime > Priority > FortiGate Serial number

Answer

Connected monitored ports > System uptime > Priority > FortiGate Serial number

Answer

Connected monitored ports > Priority > HA uptime > FortiGate Serial number

Answer

Connected monitored ports > Priority > System uptime > FortiGate Serial number

Question 5

Refer to the exhibit, which contains a Performance SLA configuration.

An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic.

Why is FortiGate not generating any traffic for the performance SLA?

Accepted Answer

Participants configured are not SD-WAN members.

Answer

There may not be a static route to route the performance SLA traffic.

Answer

You need to turn on the Enable probe packets switch.

Answer

The Ping protocol is not supported for the public servers that are configured.

Question 6

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

Accepted Answer

Flow-based inspection

Answer

Full Content inspection

Answer

Proxy-based inspection

Answer

Certificate inspection

NSE4_FGT-6.4 Fortinet NSE 4 - FortiOS 6.4 Practice Questions