最新的Fortinet NSE 4 - FortiOS 6.0 - NSE4_FGT-6.0免費考試真題

A. If the VPN is configured as a policy-based in one peer, it must also be configured as policy-based in the other peer.

B. If the VPN is configured as DialUp User in one peer, it must be configured as either Static IP Address or Dynamic DNS in the other peer.

C. If the VPN is configured as route-based, there must be at least one firewall policy with the action set to IPSec.

D. If XAuth is enabled as a server in one peer, it must be enabled as a client in the other peer.

A. It is useful when users log in to DCs that are not monitored by a collector agent.

B. It takes over as the primary authentication method when configured alongside FSSO.

C. NTLM-enabled web browsers are required.

D. Multi-domain environments require DC agents on every domain controller.

A. Log downloads from the GUI are stored as LZ4 compressed files.

B. Log downloads from the GUI are limited to the current filter view

C. Log backups from the CLI cannot be restored to another FortiGate.

D. Log backups from the CLI can be configured to upload to FTP as a scheduled time

A. The firmware image must be manually uploaded to each FortiGate.

B. Only secondary FortiGate devices are rebooted.

C. Traffic load balancing is temporally disabled while upgrading the firmware.

D. Uninterruptable upgrade is enabled by default.

A. Access to browser-based Social.Media applications will be blocked.

B. Access to all applications in Social.Media category will be blocked.

C. Access to mobile social media applications will be blocked.

D. Access to all unknown applications will be allowed.

A. Enable a web filter security profile on the Full Access firewall policy.

B. Enable disk logging.

C. Enable Log Allowed Traffic on the Full Access firewall policy.

D. Enable Event Logging.

A. Central NAT can be enabled or disabled from the CLI only.

B. IP tool references must be removed from existing firewall policies before enabling central NAT.

C. Source NAT, using central NAT, requires at least one central SNAT policy.

D. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

A. Data integrity.

B. Non-repudiation.

C. Authentication.

D. Signature verification.

A. Warning

B. Learn

C. Allow

D. Exempt

A. FortiGate IPS update requests are sent using UDP port 443.

B. IPS signature update requests are sent to update.fortiguard.net.

C. IPS engine updates can only be obtained using push updates.

D. Protocol decoder update requests are sent to service.fortiguard.net.