NSE4_FGT-6.2

Review 119 NSE4-FGT-6-2 practice questions with answer explanations and community insights.

Question 1

Examine the FortiGate configuration: What will happen to unauthenticated users when an active authentication policy is followed by a fall through policy without authentication?

  1. The user must log in again to authenticate.
  2. The user will be denied access to resources without authentication.
  3. The user will not be prompted for authentication.
  4. User authentication happens at an interface level.

Question 2

Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

  1. FG-traffic VDOM
  2. Root VDOM
  3. Customer VDOM
  4. Global VDOM

Question 3

In an HA cluster operating in active-active mode, which path is taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

  1. Client > secondary FortiGate > primary FortiGate > web server
  2. Client > primary FortiGate > secondary FortiGate > primary FortiGate > web server
  3. Client > primary FortiGate > secondary FortiGate > web server
  4. Client > secondary FortiGate > web server

Question 4

Which two statements about antivirus scanning mode are true? (Choose two.)

  1. In proxy-based inspection mode, antivirus buffers the whole file for scanning, before sending it to the client.
  2. In full scan flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
  3. In proxy-based inspection mode, files bigger than the buffer size are scanned.
  4. In quick scan mode, you can configure antivirus profiles to use any of the available antivirus signature databases.

Question 5

The FSSO collector agent set to advanced access mode for the Windows Active Directory uses which convention?

  1. LDAP
  2. Windows
  3. RSSO
  4. NTLM