Download Fortinet.NSE4_FGT-6.4.NewDumps.2021-06-05.60q.tqb
| Vendor: | Fortinet |
| Exam Code: | NSE4_FGT-6.4 |
| Exam Name: | Fortinet NSE 4 - FortiOS 6.4 |
| Date: | Jun 05, 2021 |
| File Size: | 6 MB |
Demo Questions
Question 1
Which two statements are true when FortiGate is in transparent mode? (Choose two.)
- By default, all interfaces are part of the same broadcast domain.
- The existing network IP schema must be changed when installing a transparent mode FortiGate in the network.
- Static routes are required to allow traffic to the next hop.
- FortiGate forwards frames without changing the MAC address.
Correct answer: AD
Explanation:
Reference: https://kb.fortinet.com/kb/viewAttachment.do?attachID=Fortigate_Transparent_Mode_Technical_Guide_FortiOS_4_0_version1.2.pdf&documentID=FD33113 Reference: https://kb.fortinet.com/kb/viewAttachment.do?attachID=Fortigate_Transparent_Mode_Technical_Guide_FortiOS_4_0_version1.2.pdf&documentID=FD33113
Question 2
What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?
- Full Content inspection
- Proxy-based inspection
- Certificate inspection
- Flow-based inspection
Correct answer: D
Question 3
Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)
- For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password
- FortiGate supports pre-shared key and signature as authentication methods.
- Enabling XAuth results in a faster authentication because fewer packets are exchanged.
- A certificate is not required on the remote peer when you set the signature as the authentication method.
Correct answer: AB
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/100552/using-xauth-authentication Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/100552/using-xauth-authentication
