NSE4_FGT-6.2試験無料問題集（142題）「Fortinet NSE 4

出題：1

What settings must you configure to ensure FortiGate generates logs for web filter activity on a firewall policy called Full Access? (Choose two.)

A. Enable disk logging.

B. Enable a web filter security profile on the Full Access firewall policy.

C. Enable Log Allowed Traffic on the Full Access firewall policy.

D. Enable Event Logging.

正解：B,C 解答を投票する

出題：2

Which statement about the policy ID number of a firewall policy is true?
D18912E1457D5D1DDCBD40AB3BF70D5D

A. It defines the order in which rules are processed.

B. It is required to modify a firewall policy using the CLI.

C. It represents the number of objects used in the firewall policy.

D. It changes when firewall policies are reordered.

正解：B 解答を投票する

出題：3

Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

A. Lookup is done on the trust reply packet from the responder

B. Lookup is done on every packet, regardless of direction

C. Lookup is done on the last packet sent from the responder

D. Lookup is done on the first packet from the session originator

正解：A,D 解答を投票する

出題：4

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

A. To dynamically change phase 1 negotiation mode aggressive mode.

B. To force a new DH exchange with each phase 2 rekey.

C. To delete intermediary NAT devices in the tunnel path.

D. To encapsulation ESP packets in UDP packets using port 4500.

正解：C,D 解答を投票する

出題：5

An administrator has configured two VLAN interfaces:

A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface.
However, the DHCP client cannot get a dynamic IP address from the DHCP server. What is the cause of the problem?

A. Both interfaces must have the same VLAN ID.

B. Both interfaces must belong to the same forward domain.

C. Both interfaces must be in different VDOMs.

D. The role of the VLAN10 interface must be set to server.

正解：B 解答を投票する

出題：6

Which statement regarding the firewall policy authentication timeout is true?

A. It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.

B. It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.

C. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.

D. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.

正解：D 解答を投票する

出題：7

Which of the following statements about NTLM authentication are correct? (Choose two.)

A. It is useful when users log in to DCs that are not monitored by a collector agent.

B. It takes over as the primary authentication method when configured alongside FSSO.

C. Multi-domain environments require DC agents on every domain controller.

D. NTLM-enabled web browsers are required.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

A. This VPN cannot be used as part of a hub-and-spoke topology.

B. A virtual IPsec interface is automatically created after the phase 1 configuration is completed.

C. A phase 2 configuration is not required.

D. The IPsec firewall policies must be placed at the top of the list.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Examine the two static routes shown in the exhibit, then answer the following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

A. FortiGate will route twice as much traffic to the port2 route

B. FortiGate will only actuate the port1 route in the routing table

C. FortiGate will use the port1 route as the primary candidate.

D. FortiGate will load balance all traffic across both routes.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Examine the FortiGate configuration:

What will happen to unauthenticated users when an active authentication policy is followed by a fall through policy without authentication?

A. User authentication happens at an interface level.

B. The user must log in again to authenticate.

C. The user will be denied access to resources without authentication.

D. The user will not be prompted for authentication.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE4_FGT-6.2試験無料問題集「Fortinet NSE 4 - FortiOS 6.2 認定」