NSE4_FGT-6.4 Free Practice Test

Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

1. A. Browsers can be configured to retrieve this PAC file from the FortiGate.
2. B. Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
3. C. All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
4. D. Any web request fortinet.com is allowed to bypass the proxy.

Correct Answer: AD

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

1. A. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
2. B. ADVPN is only supported with IKEv2.
3. C. Tunnels are negotiated dynamically between spokes.
4. D. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

Correct Answer: AC

View the exhibit.

Which of the following statements are correct? (Choose two.)

1. A. This setup requires at least two firewall policies with the action set to IPsec.
2. B. Dead peer detection must be disabled to support this type of IPsec setup.
3. C. The TunnelB route is the primary route for reaching the remote sit
4. D. The TunnelA route is used only if the TunnelB VPN is down.
5. E. This is a redundant IPsec setup.

Correct Answer: CD

Which type of logs on FortiGate record information about traffic directly to and from the FortiGate management IP addresses?

1. A. System event logs
2. B. Forward traffic logs
3. C. Local traffic logs
4. D. Security logs

Correct Answer: A

Which two statements are true about the FGCP protocol? (Choose two.)

1. A. Not used when FortiGate is in Transparent mode
2. B. Elects the primary FortiGate device
3. C. Runs only over the heartbeat links
4. D. Is used to discover FortiGate devices in different HA groups

Correct Answer: CD