NSE4_FGT-6.2試験無料問題集（142題）「Fortinet NSE 4

出題：1

You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

A. Device detection enabled.

B. Administrative Access: FortiTelemetry.

C. IP/Network Mask.

D. Role: Security Fabric.

正解：B,C 解答を投票する

出題：2

In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

A. Clinet >secondary FortiGate> primary FortiGate> web server.

B. Client > primary FortiGate> secondary FortiGate> primary FortiGate> web server.

C. Client > secondary FortiGate> web server.

D. Client> primary FortiGate> secondary FortiGate> web server.

正解：D 解答を投票する

出題：3

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

A. ADVPN is only supported with IKEv2.

B. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.

C. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

D. Tunnels are negotiated dynamically between spokes.

正解：B,D 解答を投票する

出題：4

What FortiGate components are tested during the hardware test? (Choose three.)

A. Administrative access

B. Hard disk

C. HA heartbeat

D. CPU

E. Network interfaces

正解：B,D,E 解答を投票する

出題：5

What information is flushed when the chunk-size value is changed in the config dlp settings?

A. The database for DLP document fingerprinting

B. The supported file types in the DLP filters

C. The archived files and messages

D. The file name patterns in the DLP filters

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Examine this output from a debug flow:

Which statements about the output are correct? (Choose two.)

A. The source IP address of the packet was translated to 10.0.1.10.

B. FortiGate routed the packet through port 3.

C. The packet was allowed by the firewall policy with the ID 00007fc0.

D. FortiGate received a TCP SYN/ACK packet.

正解：B,D 解答を投票する

出題：7

Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)

A. Priority

B. Distance

C. Metric

D. Cost

正解：A,B 解答を投票する

出題：8

Which action can be applied to each filter in the application control profile?

A. Block, monitor, warning, and quarantine

B. Allow, monitor, block, and quarantine

C. Allow, block, authenticate, and warning

D. Allow, monitor, block and learn

正解：B 解答を投票する

出題：9

Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

A. Log backups from the CLI cannot be restored to another FortiGate.

B. Log backups from the CLI can be configured to upload to FTP as a scheduled time

C. Log downloads from the GUI are limited to the current filter view

D. Log downloads from the GUI are stored as LZ4 compressed files.

正解：A,C 解答を投票する

出題：10

When override is enabled, which of the following shows the process and selection criteria that are used to elect the primary FortiGate in an HA cluster?

A. Connected monitored ports > priority > HA uptime > serial number

B. Priority > Connected monitored ports > HA uptime > serial number

C. HA uptime > priority > Connected monitored ports > serial number

D. Connected monitored ports > HA uptime > priority > serial number

正解：A 解答を投票する

NSE4_FGT-6.2試験無料問題集「Fortinet NSE 4 - FortiOS 6.2 認定」