← Back to exam page

Free NSE4-FGT-60 – Fortinet NSE4-FGT-60 Practice Test Question

Free demo downloads

Loading demo links...

Showing 10–12 of 13 questions

Question 10 (Topic 1)

Examine the network diagram shown in the exhibit, and then answer the following question: A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

Select an option, then click Submit answer.

  • ○ 172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0]
  • ○ 172.20.2.0/24 (25/0) via 10.10.3.2, port3 [5/0]
  • ○ 172.20.2.0/24 (1/150) via 10.10.3.2, port3 [10/0]
  • ○ 172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]
Question 11 (Topic 1)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Select an option, then click Submit answer.

  • ○ The firmware image must be manually uploaded to each FortiGate.
  • ○ Only secondary FortiGate devices are rebooted.
  • ○ Uninterruptable upgrade is enabled by default.
  • ○ Traffic load balancing is temporally disabled while upgrading the firmware.
Question 12 (Topic 1)

Which is a requirement for creating an inter-VDOM link between two VDOMs?

Select an option, then click Submit answer.

  • ○ The inspection mode of at least one VDOM must be proxy-based.
  • ○ At least one of the VDOMs must operate in NAT mode.
  • ○ The inspection mode of both VDOMs must match.
  • ○ Both VDOMs must operate in NAT mode.