NSE4_FGT-6.4試験無料問題集（165題）「Fortinet NSE 4

出題：1

Examine the following web filtering log.

Which statement about the log message is true?

A. The usage quota for the IP address 10.0.1.10 has expired

B. The action for the category Games is set to block.

C. The name of the applied web filter profile is default.

D. The web site miniclip.com matches a static URL filter whose action is set to Warning.

正解：C 解答を投票する

出題：2

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

A. To dynamically change phase 1 negotiation mode aggressive mode.

B. To force a new DH exchange with each phase 2 rekey.

C. To detect intermediary NAT devices in the tunnel path.

D. To encapsulation ESP packets in UDP packets using port 4500.

正解：C,D 解答を投票する

出題：3

Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?

A. The session is a bidirectional UDP connection.

B. The session is in TCP ESTABLISHED state.

C. The session is a UDP unidirectional state.

D. The session is a bidirectional TCP connection.

正解：A 解答を投票する

出題：4

Which two statements are true when FortiGate is in transparent mode? (Choose two.)

A. Static routes are required to allow traffic to the next hop.

B. By default, all interfaces are part of the same broadcast domain.

C. FortiGate forwards frames without changing the MAC address.

D. The existing network IP schema must be changed when installing a transparent mode.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

A. Traffic matching the signature will be silently dropped and logged.

B. The signature setting includes a group of other signatures.

C. Traffic matching the signature will be allowed and logged.

D. The signature setting uses a custom rating threshold.

正解：A 解答を投票する

出題：6

Refer to the exhibits.

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

A. Add Facebook in the URL category in the security policy.

B. Force access to Facebook using the HTTP service.

C. The SSL inspection needs to be a deep content inspection.

D. Additional application signatures are required to add to the security policy.

正解：C 解答を投票する

出題：7

Which of statement is true about SSL VPN web mode?

A. The tunnel is up while the client is connected.

B. The external network application sends data through the VPN.

C. It assigns a virtual IP address to the client.

D. It supports a limited number of protocols.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Which two statements are true about the RPF check? (Choose two.)

A. The RPF check is run on the first sent packet of any new session.

B. The RPF check is run on the first reply packet of any new session.

C. RPF is a mechanism that protects FortiGate and your network from IP spoofing attacks.

D. The RPF check is run on the first sent and reply packet of any new session.

正解：A,C 解答を投票する

出題：9

How do you format the FortiGate flash disk?

A. Select the format boot device option from the BIOS menu.

B. Load the hardware test (HQIP) image.

C. Execute the CLI command execute formatlogdisk.

D. Load a debug FortiOS image.

正解：A 解答を投票する

出題：10

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

A. Virtual IP addresses are used to distinguish between cluster members.

B. Heartbeat interfaces have virtual IP addresses that are manually assigned.

C. A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.

D. The primary device in the cluster is always assigned IP address 169.254.0.1.

正解：C,D 解答を投票する

NSE4_FGT-6.4試験無料問題集「Fortinet NSE 4 - FortiOS 6.4 認定」