← Back to exam page

Free NSE4-FGT-60 – Fortinet NSE4-FGT-60 Practice Test Question

Free demo downloads

Loading demo links...

Showing 7–9 of 13 questions

Question 7 (Topic 1)

What settings must you configure to ensure FortiGate generates logs for web filter activity on a firewall policy called Full Access? (Choose two.)

Select an option, then click Submit answer.

  • ○ Enable Event Logging.
  • ○ Enable a web filter security profile on the Full Access firewall policy.
  • ○ Enable Log Allowed Traffic on the Full Access firewall policy.
  • ○ Enable disk logging.
Question 8 (Topic 1)

Which of the following statements about the FSSO collector agent timers is true?

Select an option, then click Submit answer.

  • ○ The workstation verify interval is used to periodically check of a workstation is still a domain member.
  • ○ The IP address change verify interval monitors the server IP address where the collector agent is installed, and the updates the collector agent configuration if it changes.
  • ○ The user group cache expiry is used to age out the monitored groups.
  • ○ The dead entry timeout interval is used to age out entries with an unverified status.
Question 9 (Topic 1)

An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24. How must the administrator configure the local quick mode selector for site B?

Select an option, then click Submit answer.

  • ○ 192.168.3.0/24
  • ○ 192.168.2.0/24
  • ○ 192.168.1.0/24
  • ○ 192.168.0.0/8