Download Fortinet.NSE4_FGT-6.2.NewDumps.2021-03-23.140q.tqb
| Vendor: | Fortinet |
| Exam Code: | NSE4_FGT-6.2 |
| Exam Name: | Fortinet NSE4 - FortiOS 6.2 |
| Date: | Mar 23, 2021 |
| File Size: | 10 MB |
Demo Questions
Question 1
Which configuration objects can be selected for the Source field of a firewall policy? (Choose two.)
- Firewall service
- User or user group
- IP Pool
- FQDN address
Correct answer: BD
Question 2
If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?
- The Services field prevents SNAT and DNAT from being combined in the same policy.
- The Services field is used when you need to bundle several VIPs into VIP groups.
- The Services field removes the requirement to create multiple VIPs for different services.
- The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer.
Correct answer: C
Question 3
Which of the following statements about central NAT are true? (Choose two.)
- IP tool references must be removed from existing firewall policies before enabling central NAT.
- Central NAT can be enabled or disabled from the CLI only.
- Source NAT, using central NAT, requires at least one central SNAT policy.
- Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.
Correct answer: AB
