NSE4_FGT-6.2試験無料問題集（142題）「Fortinet NSE 4

出題：1

What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

A. It limits the scope of application control to scan application traffic using parent signatures only

B. It limits the scope of application control to the browser-based technology category only.

C. It limits the scope of application control to scan application traffic based on application category only.

D. It limits the scope of application control to scan application traffic on DNS protocol only.

正解：C 解答を投票する

出題：2

Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

A. Log backups from the CLI cannot be restored to another FortiGate.

B. Log backups from the CLI can be configured to upload to FTP as a scheduled time

C. Log downloads from the GUI are limited to the current filter view

D. Log downloads from the GUI are stored as LZ4 compressed files.

正解：A,C 解答を投票する

出題：3

Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

A. Extended authentication (XAuth) was successful.

B. The VPN is configured to use pre-shared key authentication.

C. Remote is the host name of the remote IPsec peer.

D. Phase 1 went down.

正解：B 解答を投票する

出題：4

Which of the following services can be inspected by the DLP profile? (Choose three.)

A. IMAP

B. HTTP-POST

C. FTP

D. CIFS

E. NFS

正解：A,B,C 解答を投票する

出題：5

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

A. Allow

B. Warning

C. Exempt

D. Learn

正解：A,B 解答を投票する

出題：6

Refer to the exhibit.

According to the certificate values shown in the exhibit, which type of entity was the certificate issued to?

A. A root CA

B. A user

C. A subordinate

D. A bridge CA

正解：B 解答を投票する

出題：7

An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark Port Forward. What step is required for this configuration?

A. Configure the client application to forward IP traffic to a Java applet proxy.

B. Configure the client application to forward IP traffic through FortiClient.

C. Configure an SSL VPN realm for clients to use the port forward bookmark.

D. Configure the virtual IP address to be assigned t the SSL VPN users.

正解：A 解答を投票する

出題：8

View the following exhibit, which shows the firewall policies and the object uses in the firewall policies.

The administrator is using the Policy Lookup feature and has entered the search create shown in the following exhibit.

Which of the following will be highlighted based on the input criteria?

A. Policy with ID 5.

B. Policy with ID 4.

C. Policies with ID 2 and 3.

D. Policy with ID1.

正解：D 解答を投票する

出題：9

A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to support this request?

A. Implement web filter quotas for the specified website.

B. Implement a web filter category override for the specified website.

C. Implement web filter authentication for the specified website

D. Implement DNS filter for the specified website.

正解：B 解答を投票する

出題：10

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

A. The firmware image must be manually uploaded to each FortiGate.

B. Traffic load balancing is temporally disabled while upgrading the firmware.

C. Uninterruptable upgrade is enabled by default.

D. Only secondary FortiGate devices are rebooted.

正解：B,C 解答を投票する

NSE4_FGT-6.2試験無料問題集「Fortinet NSE 4 - FortiOS 6.2 認定」