Fortinet NSE 4 - FortiOS 6.0 (NSE4_FGT-6.0) Free Practice Test

Question 1

Examine the exhibit, which contains a session diagnostic output.

Which of the following statements about the session diagnostic output is true?

A. The session is in LISTEN state.

B. The session is in CLOSE_WAIT state.

C. The session is in TIME_WAIT state.

D. The session is in ESTABLISHED state.

Correct Answer: D

Question 2

Which statement about FortiGuard services for FortiGate is true?

A. FortiGate downloads IPS updates using UDP port 53 or 8888.

B. FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.

C. Antivirus signatures are downloaded locally on FortiGate.

D. The web filtering database is downloaded locally on FortiGate.

Correct Answer: C

Question 3

An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose.

Where must the proxy address be used?

A. As the source in a proxy policy.

B. As the destination in a firewall policy.

C. As the source in a firewall policy.

D. As the destination in a proxy policy.

Correct Answer: A

Question 4

Which statement is true regarding SSL VPN timers? (Choose two.)

A. SSL VPN settings do not have customizable timers.

B. Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.

C. Allow to mitigate DoS attacks from partial HTTP requests.

D. Prevent SSL VPN users from being logged out because of high network latency.

Correct Answer: C,D

Question 5

View the exhibit.

Which users and user groups are allowed access to the network through captive portal?

A. Only individual users - not groups - defined in the captive portal configuration

B. All users

C. Groups defined in the captive portal configuration

D. Users and groups defined in the firewall policy.

Correct Answer: D

Question 6

What FortiGate components are tested during the hardware test? (Choose three.)

A. Network interfaces

B. Administrative access

C. CPU

D. HA heartbeat

E. Hard disk

Correct Answer: A,C,E

Question 7

Which is a requirement for creating an inter-VDOM link between two VDOMs?

A. The inspection mode of at least one VDOM must be proxy-based.

B. The inspection mode of both VDOMs must match.

C. Both VDOMs must operate in NAT mode.

D. At least one of the VDOMs must operate in NAT mode.

Correct Answer: D

Question 8

Which of the following statements about NTLM authentication are correct? (Choose two.)

A. It takes over as the primary authentication method when configured alongside FSSO.

B. Multi-domain environments require DC agents on every domain controller.

C. It is useful when users log in to DCs that are not monitored by a collector agent.

D. NTLM-enabled web browsers are required.

Correct Answer: C,D

Welcome to TestSimulate

Fortinet NSE 4 - FortiOS 6.0 (NSE4_FGT-6.0) Free Practice Test