NSE4_FGT_AD-7.6 practice questions 41–50

1. Question 41 · 78 in bank

   Refer to the exhibits.

   

   

   

   A diagram of a FortiGate device connected to the network VIP object and firewall policy configurations are shown. The WAN (port2) interface has the IP address 100.65.0.101/24. The LAN (port4) interface has the IP address 10.0.11.254/24. If the host 100.65.1.111 sends a TCP SYN packet on port 443 to 100.65.0.200, what will the source address, destination address, and destination port of packet be at the time FortiGate forwards the packet to the destination?

   • A100.65.1.111,10.0.11.50, and 443 respectively
   • B10.0.11.254,10.0.15.50, and 4443, respectively
   • C100.65.1.111,10.0.11.50, and 4443, respectively
   • D10.0.11.254,100.65.0.200, and 443, respectively

   Show answer

   Answer: C

   Next question

2. Question 42 · 78 in bank

   Select 2

   Which two statements are correct when the FortiGate device enters conserve mode? (Choose two.)

   • AFortiGate refuses to accept configuration changes.
   • BFortiGate continues to run critical security actions, such as quarantine.
   • CFortiGate halts complete system operation and requires a reboot to regain available resources.
   • DFortiGate continues to transmit packets without IPS inspection when the fail -open global setting in IPS is enabled.

   Show answer

   Answer: AD

   Next question

3. Question 43 · 78 in bank

   Refer to the exhibit.

   

   Why is the Antivirus scan switch grayed out when you are creating a new antivirus profile for FTP?

   • AThe Feature Set for the profile is Flow-based but it must be Proxy-based.
   • BFortiGate, with less than 2 GB RAM, does not support the Antivirus scan feature.
   • CAntivirus scan is disabled under System-> Feature visibility.
   • DNone of the inspected protocols are active in this profile.

   Show answer

   Answer: D

   Next question

4. Question 44 · 78 in bank

   Select 2

   Refer to the exhibit.

   

   Based on this configuration, what are the two possible outcomes when FortiGate enters conserve mode? (Choose two.)

   • AFortiGate drops new sessions requiring inspection.
   • BAdministrators must restart FortiGate to allow new sessions.
   • CFortiGate skips quarantine actions.
   • DAdministrators cannot change the configuration.

   Show answer

   Answer: CD

   Next question

5. Question 45 · 78 in bank

   Refer to the exhibit.

   

   An administrator has configured an Application Overrides for the ABC.Com application signature and set the Action to Allow. This application control profile is then applied to a firewall policy that is scanning all outbound traffic. Logging is enabled in the firewall policy. To test the configuration, the administrator accessed the ABC.Com web site several times. Why are there no logs generated under security logs for ABC.Com?

   • AThe ABC.Com is hitting the category Excessive-Bandwidth.
   • BThe ABC.Com is configured under application profile, which must be configured as a web filter profile.
   • CThe ABC.Com Type is set as Application instead of Filter.
   • DThe ABC.Com Action is set to Allow.

   Show answer

   Answer: D

   Next question

6. Question 46 · 78 in bank

   An administrator manages a FortiGate model that supports NTurbo. How does NTurbo acceleration enhance antivirus performance?

   • AFor flow-based inspection, NTurbo creates two inspection sessions on the FortiGate device.
   • BFor proxy-based inspection, NTurbo buffers the whole file and then sends it to the antivirus engine.
   • CFor flow-based inspection, NTurbo establishes a dedicated data path to redirect traffic between the IPS engine and FortiGate ingress and egress interfaces.
   • DFor proxy-based inspection, NTurbo offloads traffic to the content processor.

   Show answer

   Answer: C

   Next question

7. Question 47 · 78 in bank

   Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

   • AThe collector agent must search Windows application event logs.
   • BThe NetSessionEnum function is used to track user logouts.
   • CNetAPI polling can increase bandwidth usage in large networks.
   • DThe collector agent uses a Windows API to query DCs for user logins.

   Show answer

   Answer: B

   Next question

8. Question 48 · 78 in bank

   An administrator wanted to configure an IPS sensor to block traffic that triggers the signature set number of times during a specific time period. How can the administrator achieve the objective?

   • AUse IPS packet logging option with periodical filter option.
   • BUse IPS group signatures, set rate-mode 60.
   • CUse IPS filter, rate-mode periodical option.
   • DUse IPS signatures, rate-mode periodical option.

   Show answer

   Answer: D

   Next question

9. Question 49 · 78 in bank

   There are multiple dialup IPsec VPNs configured in aggressive mode on the HQ FortiGate. The requirement is to connect dial-up users to their respective department VPN tunnels. Which phase 1 setting you can configure to match the user to the tunnel?

   • ADead Peer Detection
   • BPeer ID
   • CLocal Gateway
   • DIKE Mode Config

   Show answer

   Answer: B

   Next question

10. Question 50 · 78 in bank

    Refer to the exhibit.

    

    FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles. Which action must the administrator perform to consolidate the two policies into one?

    • ASelect port1 and port2 subnets in a single firewall policy.
    • BCreate an Aggregate interface that includes port1 and port2 to create a single firewall policy.
    • CReplace port1 and port2 with the any interface in a single firewall policy.
    • DEnable Multiple Interface Policies to select port1 and port2 in the same firewall policy.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

NSE4_FGT_AD-7.6 practice, question 41. 78 questions available.