NSE4_FGT-6.0 Free Practice Test

NGFW mode allows policy-based configured for most impaction rules. Which security profile’s configuration does not change when you enable policy-based impaction?

1. A. Antivirus
2. B. Web proxy
3. C. Web filtering
4. D. Application control

Correct Answer: D

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

1. A. To delete intermediary NAT devices in the tunnel path.
2. B. To dynamically change phase 1 negotiation mode aggressive mode.
3. C. To encapsulation ESP packets in UDP packets using port 4500.
4. D. To force a new DH exchange with each phase 2 rekey.

Correct Answer: AC

A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups.
What is required in the SSL VPN configuration to meet these requirements?

1. A. Different SSL VPN realms for each group.
2. B. Two separate SSL VPNs in different interfaces mapping the same ssl.root.
3. C. Two firewall policies with different captive portals.
4. D. Different virtual SSL VPN IP addresses for each group.

Correct Answer: A

Which of the following features is supported by web filter in flow-based inspection mode with NGFW mode set to profile-based?

1. A. FortiGuard Quotas
2. B. Static URL
3. C. Search engines
4. D. Rating option

Correct Answer: D

Examine this PAC file configuration.
<>

1. A. Browsers can be configured to retrieve this PAC file from the FortiGate.
2. B. Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
3. C. All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
4. D. Any web request fortinet.com is allowed to bypass the proxy.

Correct Answer: AD