Scribd Logo
Upload

Welcome to Scribd!

  • 84 views

    Fortinet Nse 4 - Fortios 6.4

    Uploaded by

    Yuve Arellano
    The document contains a 10 question practice exam for the Fortinet NSE 4 - FortiOS 6.4 certification. It includes questions about static route configuration, application control, explicit web proxy configuration, user authentication and timeout settings, remote log storage options, troubleshooting tools, firewall policies, and configuring session timeouts.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Fortinet Nse 4 - Fortios 6.4

    Uploaded by

    Yuve Arellano
    84 views8 pages
    The document contains a 10 question practice exam for the Fortinet NSE 4 - FortiOS 6.4 certification. It includes questions about static route configuration, application control, explicit web proxy configuration, user authentication and timeout settings, remote log storage options, troubleshooting tools, firewall policies, and configuring session timeouts.

    Original Description:

    Forti

    Original Title

    NSE4_FGT-6.4-demo

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document contains a 10 question practice exam for the Fortinet NSE 4 - FortiOS 6.4 certification. It includes questions about static route configuration, application control, explicit web proxy configuration, user authentication and timeout settings, remote log storage options, troubleshooting tools, firewall policies, and configuring session timeouts.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    84 views8 pages

    Fortinet Nse 4 - Fortios 6.4

    Uploaded by

    Yuve Arellano
    The document contains a 10 question practice exam for the Fortinet NSE 4 - FortiOS 6.4 certification. It includes questions about static route configuration, application control, explicit web proxy configuration, user authentication and timeout settings, remote log storage options, troubleshooting tools, firewall policies, and configuring session timeouts.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 8

    Fortinet NSE 4 - FortiOS 6.

    4
    Fortinet NSE4_FGT-6.4
    Version Demo

    Total Demo Questions: 10

    Total Premium Questions: 119


    Buy Premium PDF

    https://dumpsarena.com

    sales@dumpsarena.com
    QUESTION NO: 1

    Refer to the exhibit, which contains a static route configuration.

    An administrator created a static route for Amazon Web Services.

    What CLI command must the administrator use to view the route?

    A. get router info routing-table all

    B. get internet service route list

    C. get router info routing-table database

    D. diagnose firewall proute list

    ANSWER: D

    Explanation:

    Reference: https://www.fortinetguru.com/2019/09/troubleshooting-sd-wan-fortios-6-2/

    QUESTION NO: 2

    Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

    A. Antivirus engine

    B. Intrusion prevention system engine

    C. Flow engine

    DumpsArena - Pass Your Next Certification Exam Fast!


    dumpsarena.com
    D. Detection engine

    ANSWER: B

    QUESTION NO: 3

    Refer to the exhibit.

    DumpsArena - Pass Your Next Certification Exam Fast!


    dumpsarena.com
    DumpsArena - Pass Your Next Certification Exam Fast!
    dumpsarena.com
    The exhibit shows proxy policies and proxy addresses, the authentication rule and authentication scheme, users, and firewall
    address.

    An explicit web proxy is configured for subnet range 10.0.1.0/24 with three explicit web proxy policies.

    The authentication rule is configured to authenticate HTTP requests for subnet range 10.0.1.0/24 with a form-based
    authentication scheme for the FortiGate local user database. Users will be prompted for authentication.

    How will FortiGate process the traffic when the HTTP request comes from a machine with the source IP 10.0.1.10 to the
    destination http://www.fortinet.com? (Choose two.)

    DumpsArena - Pass Your Next Certification Exam Fast!


    dumpsarena.com
    A. If a Mozilla Firefox browser is used with User-B credentials, the HTTP request will be allowed.

    B. If a Google Chrome browser is used with User-B credentials, the HTTP request will be allowed.

    C. If a Mozilla Firefox browser is used with User-A credentials, the HTTP request will be allowed.

    D. If a Microsoft Internet Explorer browser is used with User-B credentials, the HTTP request will be allowed.

    E. If a Mozilla Firefox browser is used with User-C credentials, the HTTP request will be denied.

    ANSWER: B C

    QUESTION NO: 4

    An administrator wants to configure timeouts for users. Regardless of the user’s behavior, the timer should start as soon as
    the user authenticates and expire after the configured value.

    Which timeout option should be configured on FortiGate?

    A. auth-on-demand

    B. soft-timeout

    C. idle-timeout

    D. new-session

    E. hard-timeout

    ANSWER: E

    QUESTION NO: 5

    Which type of logs on FortiGate record information about traffic directly to and from the FortiGate management IP
    addresses?

    A. Local traffic logs

    B. Forward traffic logs

    C. System event logs

    D. Security logs

    ANSWER: A

    DumpsArena - Pass Your Next Certification Exam Fast!


    dumpsarena.com
    QUESTION NO: 6

    Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

    A. get system status

    B. diagnose sys top

    C. get system performance status

    D. get system arp

    ANSWER: D

    QUESTION NO: 7

    Refer to the exhibit showing a debug flow output.

    Which two statements about the debug flow output are correct? (Choose two.)

    A. The debug flow is of ICMP traffic

    B. The default route is required to receive a reply

    C. A firewall policy allowed the connection

    D. A new traffic session is created

    ANSWER: A C

    QUESTION NO: 8

    Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

    A. FortiSIEM

    B. FortiCloud

    C. FortiCache

    DumpsArena - Pass Your Next Certification Exam Fast!


    dumpsarena.com
    D. FortiSandbox

    E. FortiAnalyzer

    ANSWER: A D E

    QUESTION NO: 9

    Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the
    link layer? (Choose three.)

    A. diagnose sys top

    B. execute ping

    C. execute traceroute

    D. diagnose sniffer packet any

    E. get system arp

    ANSWER: A B C

    QUESTION NO: 10

    An administrator has a requirement to keep an application session from timing out on port 80.

    What two changes can the administrator make to resolve the issue without affecting any existing services running through
    FortiGate? (Choose two.)

    A. Create a new firewall policy with the new HTTP service and place it above the existing HTTP policy.

    B. Set the session TTL on the HTTP policy to maximum.

    C. Create a new service object for HTTP service and set the session TTL to never.

    D. Set the TTL value to never under config system-ttl.

    ANSWER: C D

    DumpsArena - Pass Your Next Certification Exam Fast!


    dumpsarena.com

    You might also like