NSE4_FGT-6.2試験無料問題集（142題）「Fortinet NSE 4

出題：1

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

A. By default, the SSL VPN portal requires the installation of a client's certificate.

B. By default, split tunneling is enabled.

C. By default, the admin GUI and SSL VPN portal use the same HTTPS port.

D. By default, FortiGate uses WINS servers to resolve names.

正解：C 解答を投票する

出題：2

What information is flushed when the chunk-size value is changed in the config dlp settings?

A. The database for DLP document fingerprinting

B. The supported file types in the DLP filters

C. The archived files and messages

D. The file name patterns in the DLP filters

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

What FortiGate configuration is required to actively prompt users for credentials?

A. You must enable the Authentication setting on the firewall policy

B. You must assign users to a group for active authentication

C. You must enable one or more protocols that support active authentication on a firewall policy.

D. You must position the firewall policy for active authentication before a firewall policy for passive authentication

正解：C 解答を投票する

出題：4

Which one of the following processes is involved in updating IPS from FortiGuard?

A. IPS engine updates can only be obtained using push updates.

B. Protocol decoder update requests are sent to service.fortiguard.net.

C. FortiGate IPS update requests are sent using UDP port 443.

D. IPS signature update requests are sent to update.fortiguard.net.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

A. The operation mode is transparent.

B. Captive portal is enabled in the interface.

C. The interface is a member of a virtual wire pair.

D. The interface has been configured for one-arm sniffer.

E. The interface is a member of a zone.

正解：A,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Examine the network diagram shown in the exhibit, and then answer the following question:

A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

A. 172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]

B. 172.20.2.0/24 (1/150) via 10.10.1.2, port3 [10/0]

C. 172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0]

D. 172.20.2.0/24 (25/0) via 10.10.3.2, port3 [5/0]

正解：A,B 解答を投票する

出題：7

An administrator wants to create a policy-based IPsec VPN tunnel betweeb two FortiGate devices. Which configuration steps must be performed on both devices to support this scenario? (Choose three.)

A. Define at least one firewall policy, with the action set to IPsec.

B. Set the phase 2 encapsulation method to transport mode

C. Define a route to the remote network over the IPsec tunnel.

D. Define the phase 1 parameters, without enabling IPsec interface mode

E. Define the phase 2 parameters.

正解：A,D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

View the exhibit.

Based on the configuration shown in the exhibit, what statements about application control behavior are true?
(Choose two.)

A. Access to all applications in Social.Media category will be blocked.

B. Access to all unknown applications will be allowed.

C. Access to browser-based Social.Media applications will be blocked.

D. Access to mobile social media applications will be blocked.

正解：B,C 解答を投票する

出題：9

Which statement about the policy ID number of a firewall policy is true?
D18912E1457D5D1DDCBD40AB3BF70D5D

A. It defines the order in which rules are processed.

B. It is required to modify a firewall policy using the CLI.

C. It represents the number of objects used in the firewall policy.

D. It changes when firewall policies are reordered.

正解：B 解答を投票する

出題：10

How does FortiGate verify the login credentials of a remote LDAP user?

A. FortiGate queries the LDAP server for credentials.

B. FortiGate sends the user-entered credentials to the LDAP server for authentication.

C. FortiGate regenerates the algorithm based on the login credentials and compares it to the algorithm stored on the LDAP server.

D. FortiGate queries its own database for credentials.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE4_FGT-6.2試験無料問題集「Fortinet NSE 4 - FortiOS 6.2 認定」