NSE4_FGT-6.2

NSE4_FGT-6.2 practice questions, page 5 of 5, with answer review and explanations.

Question 21

Which two FortiGate configuration tasks will create a route in the policy route table? (Choose two.)

  1. Creating an SD-WAN route for individual member interfaces
  2. Creating an SD-WAN rule to route traffic based on link latency
  3. Creating a static route with a named address object
  4. Creating a static route with an Internet services object

Question 22

Refer to the exhibits. Given the antivirus profile and file transfer output shown in the exhibits, why is FortiGate not blocking the eicar.com file over FTP download?

  1. Because the proxy options profile needs to scan FTP traffic on a non-standard port
  2. Because the FortiSandbox signature database is required to successfully scan FTP traffic
  3. Because deep-inspection must be enabled for FortiGate to fully scan FTP traffic
  4. Because FortiGate needs to be operating in flow-based inspection mode in order to scan FTP traffic

Question 23

Refer to the exhibit. The exhibits show the firewall policies and the objects used in the firewall policies. The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit. Based on the input criteria, which of the following will be highlighted?

  1. The policy with ID 1
  2. The policy with ID 5
  3. The policies with ID 2 and 3
  4. The policy with ID 4