NSE4_FGT-6.0 Free Practice Test

Which one of the following processes is involved in updating IPS from FortiGuard?

1. A. FortiGate IPS update requests are sent using UDP port 443.
2. B. Protocol decoder update requests are sent to service.fortiguard.net.
3. C. IPS signature update requests are sent to update.fortiguard.net.
4. D. IPS engine updates can only be obtained using push updates.

Correct Answer: C

A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to support this request?

1. A. Implement a web filter category override for the specified website.
2. B. Implement web filter authentication for the specified website
3. C. Implement web filter quotas for the specified website.
4. D. Implement DNS filter for the specified website.

Correct Answer: A

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

1. A. remote user’s public IP address
2. B. The public IP address of the FortiGate device.
3. C. The remote user’s virtual IP address.
4. D. The internal IP address of the FotiGate device.

Correct Answer: D

Why must you use aggressive mode when a local FortiGate IPSec gateway hosts multiple dialup tunnels?

1. A. In aggressive mode, the remote peers are able to provide their peer IDs in the first message.
2. B. FortiGate is able to handle NATed connections only in aggressive mode.
3. C. FortiClient only supports aggressive mode.
4. D. Main mode does not support XAuth for user authentication.

Correct Answer: A

An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

1. A. A phase 2 configuration is not required.
2. B. This VPN cannot be used as part of a hub-and-spoke topology.
3. C. A virtual IPsec interface is automatically created after the phase 1 configuration is completed.
4. D. The IPsec firewall policies must be placed at the top of the list.

Correct Answer: C