NSE4_FGT-6.4 Free Practice Test

Which statement about the policy ID number of a firewall policy is true? D18912E1457D5D1DDCBD40AB3BF70D5D

1. A. It is required to modify a firewall policy using the CLI.
2. B. It represents the number of objects used in the firewall policy.
3. C. It changes when firewall policies are reordered.
4. D. It defines the order in which rules are processed.

Correct Answer: A

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

1. A. Warning
2. B. Exempt
3. C. Allow
4. D. Learn

Correct Answer: AC

Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

1. A. This security fabric topology is a logical topology view.
2. B. There are 19 security recommendations for the security fabric.
3. C. There are five devices that are part of the security fabric.
4. D. Device detection is disabled on all FortiGate devices.

Correct Answer: AD

Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

1. A. The IPS engine was inspecting high volume of traffic.
2. B. The IPS engine was unable to prevent an intrusion attack.
3. C. The IPS engine was blocking all traffic.
4. D. The IPS engine will continue to run in a normal state.

Correct Answer: C

Which of the following SD-WAN load –balancing method use interface weight value to distribute traffic? (Choose two.)

1. A. Source IP
2. B. Spillover
3. C. Volume
4. D. Session

Correct Answer: CD