NSE4_FGT-6.2試験無料問題集（142題）「Fortinet NSE 4

出題：1

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

A. The operation mode is transparent.

B. Captive portal is enabled in the interface.

C. The interface is a member of a virtual wire pair.

D. The interface has been configured for one-arm sniffer.

E. The interface is a member of a zone.

正解：A,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which of the following statements about central NAT are true? (Choose two.)

A. Central NAT can be enabled or disabled from the CLI only.

B. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

C. Source NAT, using central NAT, requires at least one central SNAT policy.

D. IP tool references must be removed from existing firewall policies before enabling central NAT.

正解：A,D 解答を投票する

出題：3

Which statements correctly describe transparent mode operation? (Choose three.)

A. All interfaces of the transparent mode FortiGate device must be on different IP subnets.

B. The transparent FortiGate is visible to network hosts in an IP traceroute.

C. FortiGate acts as transparent bridge and forwards traffic at Layer 2.

D. It permits inline traffic inspection and firewalling without changing the IP scheme of the network.

E. Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.

正解：C,D,E 解答を投票する

出題：4

Examine the exhibit, which contains a session diagnostic output.

Which of the following statements about the session diagnostic output is true?

A. The session is in CLOSE_WAIT state.

B. The session is in TIME_WAIT state.

C. The session is in LISTEN state.

D. The session is in ESTABLISHED state.

正解：D 解答を投票する

出題：5

Which statement regarding the firewall policy authentication timeout is true?

A. It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.

B. It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.

C. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.

D. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.

正解：D 解答を投票する

出題：6

When using WPAD DNS method, which FQDN format do browsers use to query the DNS server?

A. srv_proxy.<local-domain>/wpad.dat

B. wpad.<local-domain>

C. proxy.<local-domain>.wpad

D. srv_tcp.wpad.<local-domain>

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Examine this FortiGate configuration:

Examine the output of the following debug command:

Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

A. It is allowed and inspected as long as the inspection is flow based

B. It is dropped.

C. It is allowed, but with no inspection

D. It is allowed and inspected, as long as the only inspection required is antivirus.

正解：B 解答を投票する

出題：8

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

A. Subject Key Identifier value

B. Subject Alternative Name

C. SMMIE Capabilities value

D. Subject value

正解：D 解答を投票する

出題：9

View the exhibit.

What does this raw log indicate? (Choose two.)

A. type indicates that a security event was recorded.

B. 10.0.1.20 is the IP address for lavito.tk.

C. FortiGate blocked the traffic.

D. policyid indicates that traffic went through the IPS firewall policy.

正解：A,C 解答を投票する

出題：10

Which action can be applied to each filter in the application control profile?

A. Block, monitor, warning, and quarantine

B. Allow, monitor, block, and quarantine

C. Allow, block, authenticate, and warning

D. Allow, monitor, block and learn

正解：B 解答を投票する

NSE4_FGT-6.2試験無料問題集「Fortinet NSE 4 - FortiOS 6.2 認定」