最新的Fortinet NSE4_FGT-5.6免費考試真題

問題1

Which of the following are IP pool types supported by FortiGate?
(Choose three.)
Response:

A. Port block allocation

B. Outgoing interface

C. One-to-One

D. Transparent

E. Overload

正確答案: C,D,E

問題2

What statement is true regarding web profile overrides?
Response:

A. Configured users can activate this setting through an override link on the FortiGuard block page.

B. It is used to change the website category

C. It is not possible to completely override a web filter profile.

D. This feature is available only in flow-based inspection.

正確答案: A

問題3

What FortiGate feature can be used to prevent a cross-site scripting (XSS) attack?
Response:

A. DoS policies

B. One-arm sniffer

C. Rate based IPS signatures

D. Web application firewall (WAF)

正確答案: D

問題4

A FortiGate interface is configured with the following commands:

What statements about the configuration are correct?
(Choose two.)
Response:

A. FortiGate can send IPv6 router advertisements (RAs.)

B. FortiGate can provide IPv6 addresses to DHCPv6 client.

C. FortiGate can provide DNS settings to IPv6 clients.

D. IPv6 clients connected to port1 can use SLAAC to generate their IPv6 addresses.

正確答案: A,D

問題5

View the exhibit.

In this scenario, FGT1 has the following routing table:
S*0. 0. 0. 0/0 [10/0] via 10. 40.
72. 2, port1 C172. 16. 32. 0/24 is directly connected, port2
C10. 40. 72. 0/30 is directly connected, port1
A user at 192.168.32.15 is trying to access the web server at 172.16.32.254. Which of the following statements best describe how the FortiGate will perform reverse path forwarding checks on this traffic?
(Choose two.)
Response:

A. Loose RPF check will allow the traffic.

B. Strict RPF check will deny the traffic.

C. Strict RPF check will allow the traffic.

D. Loose RPF check will deny the traffic.

正確答案: C,D

問題6

Which of the following statements regarding FortiGate inspection modes are correct?
(Choose three.)
Response:

A. Switching from proxy-based inspection mode to flow-based inspection mode will result in a warning message.

B. Security profiles must be manually converted to flow-based before switching the inspection mode from proxy-based to flow-based.

C. Proxy-based inspection mode supports more features.

D. Flow-based is the default FortiGate inspection mode.

E. Switching from proxy-based to flow-based and then back to proxy-based will not produce original configurations.

正確答案: A,C,E

問題7

Which of the following statements about advanced AD access mode for the FSSO collector agent are true?
(Choose two.)
Response:

A. FortiGate can act as an LDAP client to configure the group filters.

B. It is only supported if DC agents are deployed.

C. It uses the Windows convention for naming; that is, Domain\Username.

D. It supports monitoring of nested groups.

正確答案: A,B

問題8

Which ways can FortiGate deliver one-time passwords (OTPs) to two-factor authentication users in your network?
(Choose three.)
Response:

A. SMS

B. FortiToken Mobile

C. Web portal

D. USB FortiToken

E. Hardware FortiToken

正確答案: A,B,E

問題9

Which statement about data leak prevention (DLP) on a FortiGate is true?
Response:

A. Files can be sent to FortiSandbox for detecting DLP threats.

B. It can be applied to a firewall policy in a flow-based VDOM.

C. It can archive files and messages.

D. Traffic shaping can be applied to DLP sensors.

正確答案: C

問題10

Which statements about an IPv6-over-IPv4 IPsec configuration are correct?
(Choose two.)
Response:

A. The destination quick mode selector must be an IPv6 address.

B. The remote gateway IP must be an IPv6 address.

C. The local gateway IP must an IPv4 address.

D. The source quick mode selector must be an IPv4 address.

正確答案: A,C

最新的Fortinet NSE 4 - FortiOS 5.6 - NSE4_FGT-5.6免費考試真題

聯系我們

站內鏈接

最新更新