NSE4_FGT-6.4 Practice Test

NSE4_FGT-6.4 Practice Test practice questions, page 3 of 5, with answer review and explanations.

Question 11

Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

  1. Web filter in flow-based inspection
  2. Antivirus in flow-based inspection
  3. DNS filter
  4. Web application firewall
  5. Application control

Question 12

Refer to the exhibit. Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

  1. There are five devices that are part of the security fabric.
  2. Device detection is disabled on all FortiGate devices.
  3. This security fabric topology is a logical topology view.
  4. There are 19 security recommendations for the security fabric.

Question 13

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has features enabled, such as safe search?

  1. DNS-based web filter and proxy-based web filter
  2. Static URL filter, FortiGuard category filter, and advanced filters
  3. Static domain filter, SSL inspection filter, and external connectors filters
  4. FortiGuard category filter and rating filter

Question 14

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?

  1. Log ID
  2. Universally Unique Identifier
  3. Policy ID
  4. Sequence ID

Question 15

Refer to the exhibit to view the firewall policy. Which statement is correct if well-known viruses are not being blocked?

  1. The firewall policy does not apply deep content inspection.
  2. The firewall policy must be configured in proxy-based inspection mode.
  3. The action on the firewall policy must be set to deny.
  4. Web filter should be enabled on the firewall policy to complement the antivirus profile.