NSE4_FGT-6.4 Fortinet Exam Questions and Free Practice Test

Question 7

Refer to theexhibits.
NSE4_FGT-6.4 dumps exhibit

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they areunableto leavereactions on videos or other types ofposts.
Which part ofthe policy configuration must you change to resolve the issue?

A. The SSL inspection needs tobe a deep content inspection.

B. Force access to Facebook using the HTTP service.

C. Additional application signatures arerequired to add to thesecurity policy.

D. Add Facebook in the URL category in the security policy.

Correct Answer:A

Question 8

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

A. A CRL

B. A person

C. A subordinate CA

D. A root CA

Correct Answer:D

Question 9

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

A. To remove the NAT operation.

B. To generate logs

C. To finish any inspection operations.

D. To allow for out-of-order packets that could arrive after the FIN/ACK packets.

Correct Answer:D

Question 10

Refer to the exhibit.
NSE4_FGT-6.4 dumps exhibit

The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

A. port2

B. port4

C. port3

D. port1

Correct Answer:B

Question 11

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

A. The collector agent uses a Windows API to query DCs for user logins.

B. NetAPI polling can increase bandwidth usage in large networks.

C. The collector agent must search security event logs.

D. The NetSessionEnum functionis user] to track user logouts.

Correct Answer:A

Question 12

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

A. The firmware image must be manually uploaded to each FortiGate.

B. Only secondary FortiGate devices are rebooted.

C. Uninterruptable upgrade is enabled by default.

D. Traffic load balancing is temporally disabled while upgrading the firmware.

Correct Answer:CD

START NSE4_FGT-6.4 EXAM