Fortinet NSE 4 - FortiOS 5.6 (NSE4_FGT-5.6) Free Practice Test
Question 1
Examine this FortiGate configuration:
config system global
set av-failopen pass
set fail-open disable
end
Examine the output of the following debug command:
# diagnose hardware sysinfo conserve
memory conserve mode: on
total RAM: 3040 MB
memory used: 2706 MB 89% of total RAM
memory used threshold extreme: 2887 MB 95% of total RAM
memory used threshold red: 2675 MB 88% of total RAM
memory used threshold green: 2492 MB 82% of total RAM
Based on the diagnostics outputs above, how is the FortiGate handling packets that require IPS inspection?
Response:
config system global
set av-failopen pass
set fail-open disable
end
Examine the output of the following debug command:
# diagnose hardware sysinfo conserve
memory conserve mode: on
total RAM: 3040 MB
memory used: 2706 MB 89% of total RAM
memory used threshold extreme: 2887 MB 95% of total RAM
memory used threshold red: 2675 MB 88% of total RAM
memory used threshold green: 2492 MB 82% of total RAM
Based on the diagnostics outputs above, how is the FortiGate handling packets that require IPS inspection?
Response:
Correct Answer: D
Question 2
A FortiGate has multiple VDOMs operating in NAT mode with multiple VLAN interfaces in each VDOM. Which of the following statements is true regarding the IP addresses assigned to each VLAN interface?
Response:
Response:
Correct Answer: B
Question 3
Which remote device's logs can you display in the FortiGate GUI by configuring the log setting's GUI Preferences?
Response:
Response:
Correct Answer: C
Question 4
Which of the following statements are true regarding the SD-WAN feature on FortiGate?
(Choose two.)
Response:
(Choose two.)
Response:
Correct Answer: B,C
Question 5
Which traffic inspection features can be executed by a security processor (SP)?
(Choose three.)
Response:
(Choose three.)
Response:
Correct Answer: A,D,E
Question 6
Which statements are true regarding active authentication?
(Choose two.)
Response:
(Choose two.)
Response:
Correct Answer: A,C