Download Fortinet.NSE4_FGT-6.0.CertDumps.2020-02-12.127q.tqb
| Vendor: | Fortinet |
| Exam Code: | NSE4_FGT-6.0 |
| Exam Name: | Fortinet NSE4 - FortiOS 6.0 |
| Date: | Feb 12, 2020 |
| File Size: | 8 MB |
Demo Questions
Question 1
Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.
What are the expected actions if traffic matches this IPS sensor? (Choose two.)
- The sensor will gather a packet log for all matched traffic.
- The sensor will not block attackers matching the A32S.Botnet signature.
- The sensor will block all attacks for Windows servers.
- The sensor will reset all connections that match these signatures.
Correct answer: AC
Question 2
Which statement is true regarding the policy ID number of a firewall policy?
- Defines the order in which rules are processed.
- Represents the number of objects used in the firewall policy.
- Required to modify a firewall policy using the CLI.
- Changes when firewall policies are reordered.
Correct answer: C
Question 3
Which statements correctly describe transparent mode operation? (Choose three.)
- All interfaces of the transparent mode FortiGate device must be on different IP subnets.
- Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.
- The transparent FortiGate is visible to network hosts in an IP traceroute.
- It permits inline traffic inspection and firewalling without changing the IP scheme of the network.
- FortiGate acts as transparent bridge and forwards traffic at Layer 2.
Correct answer: BDE
