NSE4_FGT-6.4 Free Practice Test

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

1. A. Subject Key Identifiervalue
2. B. SMMIE Capabilitiesvalue
3. C. Subjectvalue
4. D. Subject Alternative Namevalue

Correct Answer: C

Which three statements about a flow-based antivirus profile are correct? (Choose three.)

1. A. IPS engine handles the process as a standalone.
2. B. FortiGate buffers the whole file but transmits to the client simultaneously.
3. C. If the virus is detected, the last packet is delivered to the client.
4. D. Optimized performance compared to proxy-based inspection.
5. E. Flow-based inspection uses a hybrid of scanning modes available in proxy-based inspection.

Correct Answer: CDE

Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings. Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

1. A. The signature setting uses a custom rating threshold.
2. B. The signature setting includes a group of other signatures.
3. C. Traffic matching the signature will be allowed and logged.
4. D. Traffic matching the signature will be silently dropped and logged.

Correct Answer: B

Examine the exhibit, which contains a virtual IP and firewall policy configuration.



The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

1. A. 10.200.1.10
2. B. Any available IP address in the WAN (port1) subnet 10.200.1.0/24
3. C. 10.200.1.1
4. D. 10.0.1.254

Correct Answer: B
https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-firewall-52/Firewall Objects/Virtual IPs.

Refer to the exhibit.

According to the certificate values shown in the exhibit, which type of entity was the certificate issued to?

1. A. A user
2. B. A root CA
3. C. A bridge CA
4. D. A subordinate

Correct Answer: A