NSE4_FGT-6.4 Practice Test

NSE4_FGT-6.4 Practice Test practice questions, page 4 of 5, with answer review and explanations.

Question 16

Refer to the exhibit, which contains a session diagnostic output. Which statement is true about the session diagnostic output?

  1. The session is a UDP unidirectional state.
  2. The session is in TCP ESTABLISHED state.
  3. The session is a bidirectional UDP connection.
  4. The session is a bidirectional TCP connection.

Question 17

Refer to the exhibit. The exhibit shows proxy policies and proxy addresses, the authentication rule and authentication scheme, users, and firewall address. An explicit web proxy is configured for subnet range 10.0.1.0/24 with three explicit web proxy policies. The authentication rule is configured to authenticate HTTP requests for subnet range 10.0.1.0/24 with a form-based authentication scheme for the FortiGate local user database. Users will be prompted for authentication. How will FortiGate process the traffic when the HTTP request comes from a machine with the source IP 10.0.1.10 to the destination http:// www.fortinet.com? (Choose two.)

  1. If a Mozilla Firefox browser is used with User-B credentials, the HTTP request will be allowed.
  2. If a Google Chrome browser is used with User-B credentials, the HTTP request will be allowed.
  3. If a Mozilla Firefox browser is used with User-A credentials, the HTTP request will be allowed.
  4. If a Microsoft Internet Explorer browser is used with User-B credentials, the HTTP request will be allowed.
  5. If a Mozilla Firefox browser is used with User-C credentials, the HTTP request will be denied.

Question 18

Refer to the exhibit. Exhibit A - Exhibit B - The exhibit shows the configuration for the SD-WAN member, Performance SLA and SD-WAN Rule, as well as the output of diagnose sys virtual-wan- link health-check. Which interface will be selected as an outgoing interface?

  1. port4
  2. port2
  3. port1
  4. port3

Question 19

What devices form the core of the security fabric?

  1. Two FortiGate devices and one FortiManager device
  2. One FortiGate device and one FortiManager device
  3. Two FortiGate devices and one FortiAnalyzer device
  4. One FortiGate device and one FortiAnalyzer device

Question 20

Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

  1. Source defined as Internet Services in the firewall policy.
  2. Destination defined as Internet Services in the firewall policy.
  3. Highest to lowest priority defined in the firewall policy.
  4. Services defined in the firewall policy.
  5. Lowest to highest policy ID number.