Fortinet NSE 4 - FortiOS 6.2 (NSE4_FGT-6.2) Free Practice Test

Question 1

During the digital verification process, comparing the original and fresh hash results satisfies which security requirement?

A. Data integrity.

B. Signature verification.

C. Authentication.

D. Non-repudiation.

Correct Answer: A

Question 2

Examine the following web filtering log.

Which statement about the log message is true?

A. The web site miniclip.com matches a static URL filter whose action is set to Warning.

B. The action for the category Games is set to block.

C. The usage quota for the IP address 10.0.1.10 has expired

D. The name of the applied web filter profile is default.

Correct Answer: D

Question 3

Which statements about a One-to-One IP pool are true? (Choose two.)

A. It does not use port address translation.

B. It allows the fixed mapping of an internal address range to an external address range.

C. It allows the configuration of ARP replies.

D. It is used for destination NAT.

Correct Answer: A,C

Question 4

View the exhibit.

A
user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

A. Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.

B. Addcting.Games is allowed based on the Categories configuration.

C. Addicting.Games is allowed based on the Application Overrides configuration.

D. Addicting.Games is blocked on the Filter Overrides configuration.

Correct Answer: C

Question 5

View the exhibit.

Which of the following statements are correct? (Choose two.)

A. Dead peer detection must be disabled to support this type of IPsec setup.

B. The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

C. This setup requires at least two firewall policies with the action set to IPsec.

D. This is a redundant IPsec setup.

Correct Answer: B,D

Question 6

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

A. Only secondary FortiGate devices are rebooted.

B. Traffic load balancing is temporally disabled while upgrading the firmware.

C. The firmware image must be manually uploaded to each FortiGate.

D. Uninterruptable upgrade is enabled by default.

Correct Answer: B,D

Question 7

Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

A. 172.16.32.0/24 is directly connected, port1

B. 0.0.0.0/0 [20/0] via 10.4.200.2, port2

C. 172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]

D. 10.4.200.0/30 is directly connected, port2

Correct Answer: A

Question 8

Which is a requirement for creating an inter-VDOM link between two VDOMs?

A. The inspection mode of at least one VDOM must be proxy-based.

B. The inspection mode of both VDOMs must match.

C. Both VDOMs must operate in NAT mode.

D. At least one of the VDOMs must operate in NAT mode.

Correct Answer: D

Question 9

When override is enabled, which of the following shows the process and selection criteria that are used to elect the primary FortiGate in an HA cluster?

A. Priority > Connected monitored ports > HA uptime > serial number

B. Connected monitored ports > HA uptime > priority > serial number

C. Connected monitored ports > priority > HA uptime > serial number

D. HA uptime > priority > Connected monitored ports > serial number

Correct Answer: C

Question 10

A FortiGate device has multiple VDOMs. Which statement about an administrator account configured with the default prof_admin profile is true?

A. It can create administrator accounts with access to the same VDOM.

B. It can upgrade the firmware on the FortiGate device.

C. It cannot have access to more than one VDOM.

D. It can reset the password for the admin account.

Correct Answer: A

Welcome to TestSimulate

Fortinet NSE 4 - FortiOS 6.2 (NSE4_FGT-6.2) Free Practice Test