NSE4_FGT-6.2 Free Practice Test

An administrator has configured central DNAT and virtual IPs. Which of the following can be selected in the firewall policy Destination field?

1. A. A VIP group
2. B. The mapped IP address object of the VIP object
3. C. A VIP object
4. D. An IP pool

Correct Answer: B

View the exhibit.
<>

1. A. Users and groups defined in the firewall policy.
2. B. Only individual users – not groups – defined in the captive portal configuration
3. C. Groups defined in the captive portal configuration
4. D. All users

Correct Answer: A

What files are sent to FortiSandbox for inspection in flow-based inspection mode?

1. A. All suspicious files that do not have their hash value in the FortiGuard antivirus signature database.
2. B. All suspicious files that are above the defined oversize limit value in the protocol options.
3. C. All suspicious files that match patterns defined in the antivirus profile.
4. D. All suspicious files that are allowed to be submitted to FortiSandbox in the antivirus profile.

Correct Answer: C

Which statement is true regarding SSL VPN timers? (Choose two.)

1. A. Allow to mitigate DoS attacks from partial HTTP requests.
2. B. SSL VPN settings do not have customizable timers.
3. C. Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.
4. D. Prevent SSL VPN users from being logged out because of high network latency.

Correct Answer: AD

View the exhibit.
<>>

1. A. A static or dynamic route in VDOM2 with the subnet 10.0.1.0/24 as the destination.
2. B. A static or dynamic route in VDOM1 with the subnet 10.200.1.0/24 as the destination.
3. C. One firewall policy in VDOM1 with port2 as the source interface and InterVDOM0 as the destination interface.
4. D. One firewall policy in VDOM2 with InterVDOM1 as the source interface and port1 as the destination interface.

Correct Answer: C