NSE4_FGT-5.6 Online Practice Questions and Answers

What is the Unknown Applications category option in the application control profile?

Response:

A. Any traffic that does not match the RFC pattern for its protocol.

B. Any traffic that does not match an application control signature.

C. Any traffic whose packet fails the CRC check.

D. Any traffic that matches custom application control signatures.

A remote user is trying to authenticate with a user name and password. How does FortiGate verify the login credentials? Response:

A. FortiGate queries its own database for user credentials.

B. FortiGate queries the remote server for user credentials.

C. FortiGate sends the user entered credentials to the remote server for verification.

D. FortiGate re-generates the algorithm based on the login credentials and compares it against the algorithm stored on the remote server.

To create a valid traffic shaping policy, which of the following matching criteria must align between a traffic

shaping policy and a firewall policy?

(Choose three.)

Response:

A. Source

B. Schedule

C. Service

D. Destination

E. Incoming interface

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

Response:

A. The FortiGate unit's public IP address

B. The FortiGate unit's internal IP address

C. The remote user's virtual IP address

D. The remote user's public IP address

Which of the following statements is true regarding client integrity checking in SSL VPN? Response:

A. It detects the Windows client security applications running in the SSL VPN client's PCs.

B. It validates the SSL VPN user credentials on the remote authentication server.

C. It verifies which SSL VPN portal must be presented to each SSL VPN user.

D. It verifies that the latest SSL VPN client is installed in the client's PC.

Which of the following settings and protocols can be used to provide secure and restrictive administrative

access to FortiGate?

(Choose three.)

Response:

A. Trusted host

B. HTTPS

C. Trusted authentication

D. SSH

E. FortiTelemetry

Examine the exhibit, which shows the output of a web filtering real time debug.

Why is the site www.bing.com being blocked? Response:

A. The web server IP address 204.79.197.200 is categorized by FortiGuard as Malicious Websites.

B. The rating for the web site www.bing.com has been locally overridden to a category that is being blocked.

C. The web site www.bing.com is categorized by FortiGuard as Malicious Websites.

D. The user has not authenticated with the FortiGate yet.

Which of the following protocols can you use for secure administrative access to a FortiGate?

(Choose two.)

Response:

A. HTTPS

B. Telnet

C. SSH

D. FortiTelemetry

Which of the following actions are available under the System Information widget for system configuration?

(Choose two.)

Response:

A. Backup

B. Upload

C. Checkpoint

D. Configuration Recovery

E. Restore

To which remote devices can FortiGate send logs?

(Choose three.)

Response:

A. Syslog

B. FortiAnalyzer

C. Hard drive

D. Memory

E. FortiCloud