NSE4_FGT-6.2 Free Practice Test

View the exhibit.
< ><>< ><>What does this raw log indicate? (Choose two.)

1. A. FortiGate blocked the traffic.
2. B. type indicates that a security event was recorded.
3. C. 10.0.1.20 is the IP address for lavito.tk.
4. D. policyid indicates that traffic went through the IPS firewall policy.

Correct Answer: AB

View the exhibit.
<>

1. A. The all VDOM is not synchronized between the primary and secondary FortiGate devices.
2. B. The root VDOM is not synchronized between the primary and secondary FortiGate devices.
3. C. The global configuration is synchronized between the primary and secondary FortiGate devices.
4. D. The FortiGate devices have three VDOMs.

Correct Answer: BC

If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

1. A. The Services field removes the requirement of creating multiple VIPs for different services.
2. B. The Services field is used when several VIPs need to be bundled into VIP groups.
3. C. The Services field does not allow source NAT and destination NAT to be combined in the same policy.
4. D. The Services field does not allow multiple sources of traffic, to use multiple services, to connect to a single computer.

Correct Answer: A

You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:
<>

1. A. Device detection enabled.
2. B. Administrative Access: FortiTelemetry.
3. C. IP/Network Mask.
4. D. Role: Security Fabric.

Correct Answer: BC

Which statements about antivirus scanning mode are true? (Choose two.)

1. A. In proxy-based inspection mode antivirus buffers the whole file for scarring before sending it to the client.
2. B. In flow-based inspection mode, you can use the CLI to configure antivirus profiles to use protocol option profiles.
3. C. In proxy-based inspection mode, if a virus is detected, a replacement message may not be displayed immediately.
4. D. In quick scan mode, you can configure antivirus profiles to use any of the available signature data bases.

Correct Answer: AB
A: Buffers the whole file, packets sent to the client after scan finishes
B: When the antivirus profile is operating in flow-based inspection mode, two scanning mode options are available: full scan mode and quick scan mode.(Normal extended, or extreme-depending on what is configured in the CLI).