Download Fortinet.NSE4_FGT-6.0.BrainDumps.2019-02-05.35q.tqb
| Vendor: | Fortinet |
| Exam Code: | NSE4_FGT-6.0 |
| Exam Name: | Fortinet NSE4 - FortiOS 6.0 |
| Date: | Feb 05, 2019 |
| File Size: | 2 MB |
Demo Questions
Question 1
What files are sent to FortiSandbox for inspection in flow-based inspection mode?
- All suspicious files that do not have their hash value in the FortiGuard antivirus signature database.
- All suspicious files that are above the defined oversize limit value in the protocol options.
- All suspicious files that match patterns defined in the antivirus profile.
- All suspicious files that are allowed to be submitted to FortiSandbox in the antivirus profile.
Correct answer: C
Question 2
Which statements about a One-to-One IP pool are true? (Choose two.)
- It is used for destination NAT.
- It allows the fixed mapping of an internal address range to an external address range.
- It does not use port address translation.
- It allows the configuration of ARP replies.
Correct answer: BC
Question 3
An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)
- Configure split tunneling for content inspection.
- Configure host restrictions by IP or MAC address.
- Configure two-factor authentication using security certificates.
- Configure SSL offloading to a content processor (FortiASIC).
- Configure a client integrity check (host-check).
Correct answer: CDE
