NSE4_FGT-6.0 Free Practice Test

Which of the following FortiGate configuration tasks will create a route in the policy route table? (Choose two.)

1. A. Static route created with a Named Address object
2. B. Static route created with an Internet Services object
3. C. SD-WAN route created for individual member interfaces
4. D. SD-WAN rule created to route traffic based on link latency

Correct Answer: AD

When override is enabled, which of the following shows the process and selection criteria that are used to elect the primary FortiGate in an HA cluster?

1. A. Connected monitored ports > HA uptime > priority > serial number
2. B. Priority > Connected monitored ports > HA uptime > serial number
3. C. Connected monitored ports > priority > HA uptime > serial number
4. D. HA uptime > priority > Connected monitored ports > serial number

Correct Answer: C

How does FortiGate select the central SNAT policy that is applied to a TCP session?

1. A. It selects the SNAT policy specified in the configuration of the outgoing interface.
2. B. It selects the first matching central SNAT policy, reviewing from top to bottom.
3. C. It selects the central SNAT policy with the lowest priority.
4. D. It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.

Correct Answer: B

Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)

1. A. Include the group of guest users in a policy.
2. B. Extend timeout timers.
3. C. Guarantee at least 34 Kbps bandwidth between FortiGate and domain controllers.
4. D. Ensure all firewalls allow the FSSO required ports.

Correct Answer: AD

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

1. A. By default, FortiGate uses WINS servers to resolve names.
2. B. By default, the SSL VPN portal requires the installation of a client’s certificate.
3. C. By default, split tunneling is enabled.
4. D. By default, the admin GUI and SSL VPN portal use the same HTTPS port.

Correct Answer: A