← Back to exam page

NSE4_FGT-6.2 – Fortinet NSE 4 - FortiOS 6.2

Loading demo links...

Showing 7–9 of 10 questions

Question 7

Refer to the exhibit.

The exhibits show the firewall policies and the objects used in the firewall policies. The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

Based on the input criteria, which of the following will be highlighted?

Select an option, then click Submit answer.

  • ○

    The policy with ID 1
  • ○

    The policy with ID 5
  • ○

    The policies with ID 2 and 3
  • ○

    The policy with ID 4
Question 8

An administrator has configured a route-based IPsec VPN between two FortiGate devices.

Which statement about this IPsec VPN configuration is true?

Select an option, then click Submit answer.

  • ○

    A phase 2 configuration is not required.
  • ○

    This VPN cannot be used as part of a hub-and-spoke topology.
  • ○

    A virtual IPsec interface is automatically created after the phase 1 configuration is completed.
  • ○

    The IPsec firewall policies must be placed at the top of the list.
Question 9

Consider a new IPsec deployment with the following criteria:

All satellite offices must connect to the two HQ sites.

The satellite offices do not need to communicate directly with other satellite offices.

Backup VPN is not required.

The design should minimize the number of tunnels being configured.

Which topology should you use to satisfy all of the requirements?

Select an option, then click Submit answer.

  • ○

    Partial mesh
  • ○

    Redundant
  • ○

    Full mesh
  • ○

    Hub-and-spoke