NSE4_FGT-6.2試験無料問題集（142題）「Fortinet NSE 4

出題：1

Examine this FortiGate configuration:

Examine the output of the following debug command:

Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

A. It is allowed and inspected as long as the inspection is flow based

B. It is dropped.

C. It is allowed, but with no inspection

D. It is allowed and inspected, as long as the only inspection required is antivirus.

正解：B 解答を投票する

出題：2

View the exhibit.

Why is the administrator getting the error shown in the exhibit?

A. The administrator admin does not have the privileges required to configure global settings.

B. The command config system global does not exist in FortiGate.

C. The global settings cannot be configured from the root VDOM context.

D. The administrator must first enter the command edit global.

正解：C 解答を投票する

出題：3

HTTP Public Key Pinning (HPKP) can be an obstacle to implementing full SSL inspection. What solutions could resolve this problem? (Choose two.)

A. Enable Allow Invalid SSL Certificates for the relevant security profile.

B. Change web browsers to one that does not support HPKP.

C. Install the CA certificate (that is required to verify the web server certificate) stores of users' computers.

D. Exempt those web sites that use HPKP from full SSL inspection.

正解：B,D 解答を投票する

出題：4

An administrator has configured two VLAN interfaces:

A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface.
However, the DHCP client cannot get a dynamic IP address from the DHCP server. What is the cause of the problem?

A. Both interfaces must have the same VLAN ID.

B. Both interfaces must belong to the same forward domain.

C. Both interfaces must be in different VDOMs.

D. The role of the VLAN10 interface must be set to server.

正解：B 解答を投票する

出題：5

Which statements correctly describe transparent mode operation? (Choose three.)

A. All interfaces of the transparent mode FortiGate device must be on different IP subnets.

B. The transparent FortiGate is visible to network hosts in an IP traceroute.

C. FortiGate acts as transparent bridge and forwards traffic at Layer 2.

D. It permits inline traffic inspection and firewalling without changing the IP scheme of the network.

E. Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.

正解：C,D,E 解答を投票する

出題：6

Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)

A. Priority

B. Distance

C. Metric

D. Cost

正解：A,B 解答を投票する

出題：7

What settings must you configure to ensure FortiGate generates logs for web filter activity on a firewall policy called Full Access? (Choose two.)

A. Enable disk logging.

B. Enable a web filter security profile on the Full Access firewall policy.

C. Enable Log Allowed Traffic on the Full Access firewall policy.

D. Enable Event Logging.

正解：B,C 解答を投票する

出題：8

You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

A. Device detection enabled.

B. Administrative Access: FortiTelemetry.

C. IP/Network Mask.

D. Role: Security Fabric.

正解：B,C 解答を投票する

出題：9

View the certificate shown to the exhibit, and then answer the following question:

The CA issued this certificate to which entity?

A. A person

B. A root CA

C. A bridge CA

D. A subordinate CA

正解：B 解答を投票する

出題：10

Which statement about a One-to-One IP pool is true?

A. It allows the fixed mapping of an internal address range to an external address range.

B. It does not use port address translation.

C. It is used for destination NAT.

D. It limits the client to 64 connections per IP pool.

正解：B 解答を投票する

NSE4_FGT-6.2試験無料問題集「Fortinet NSE 4 - FortiOS 6.2 認定」