Fortinet NSE 4 - FortiOS 6.4 - NSE4_FGT-6.4 模擬練習
Which two statements about antivirus scanning mode are true? (Choose two.)
正解: C,D
An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?
Which DPD mode on FortiGate will meet the above requirement?
正解: B
Refer to the exhibit, which contains a session diagnostic output.
Which statement is true about the session diagnostic output?
Which statement is true about the session diagnostic output?
正解: D
An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?
正解: A
Which statements best describe auto discovery VPN (ADVPN). (Choose two.)
正解: B,D
Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)
正解: A,C,D
To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?
正解: C
Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?
正解: C
Refer to the exhibit.
Which contains a network diagram and routing table output.
The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?
Which contains a network diagram and routing table output.
The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?
正解: A
In which two ways can RPF checking be disabled? (Choose two )
正解: A,C
Refer to the exhibit to view the application control profile.
Based on the configuration, what will happen to Apple FaceTime?
Based on the configuration, what will happen to Apple FaceTime?
正解: B
Which feature in the Security Fabric takes one or more actions based on event triggers?
正解: B
If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?
正解: C
解説: (PassTest メンバーにのみ表示されます)
Refer to the exhibit.
In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?
In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?
正解: B