NSE4_FGT-6.4 Free Practice Test

Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

1. A. Log downloads from the GUI are limited to the current filter view
2. B. Log backups from the CLI cannot be restored to another FortiGate.
3. C. Log backups from the CLI can be configured to upload to FTP as a scheduled time
4. D. Log downloads from the GUI are stored as LZ4 compressed files.

Correct Answer: AB

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

1. A. Configure Source IP Pools.
2. B. Configure split tunneling in tunnel mode.
3. C. Configure different SSL VPN realms.
4. D. Configure host check.

Correct Answer: D

Examine the two static routes shown in the exhibit, then answer the following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

1. A. FortiGate will load balance all traffic across both routes.
2. B. FortiGate will use the port1 route as the primary candidate.
3. C. FortiGate will route twice as much traffic to the port2 route
4. D. FortiGate will only actuate the port1 route in the routing table

Correct Answer: B
“If multiple static routes have the same distance, they are all active; however, only the one with the lowest priority is considered the best path.”

Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

1. A. SMTP.Login.Brute.Force
2. B. IMAP.Login.brute.Force
3. C. ip_src_session
4. D. Location: server Protocol: SMTP

Correct Answer: B

How do you format the FortiGate flash disk?

1. A. Load a debug FortiOS image.
2. B. Load the hardware test (HQIP) image.
3. C. Execute the CLI command execute formatlogdisk.
4. D. Select the format boot device option from the BIOS menu.

Correct Answer: D