Free NSE4-FGT-62 – Fortinet NSE4-FGT-62 Practice Test Question

Select an option, then click Submit answer.

• ○ Client > secondary FortiGate > primary FortiGate > web server
• ○ Client > primary FortiGate > secondary FortiGate > primary FortiGate > web server
• ○ Client > primary FortiGate > secondary FortiGate > web server
• ○ Client > secondary FortiGate > web server

Select an option, then click Submit answer.

• ○ Implement web filter authentication for the specified website.
• ○ Implement a web filter category override for the specified website.
• ○ Implement DNS filter for the specified website.
• ○ Implement web filter quotas for the specified website.

Select an option, then click Submit answer.

• ○ A static or dynamic route in VDOM2 with the subnet 10.0.1.0/24 as the destination.
• ○ A static or dynamic route in VDOM1 with the subnet 10.200.1.0/24 as the destination.
• ○ One firewall policy in VDOM1 with port2 as the source interface and InterVDOM0 as the destination interface.
• ○ One firewall policy in VDOM2 with InterVDOM1 as the source interface and port1 as the destination interface.

Select an option, then click Submit answer.

• ○ It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.
• ○ It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.
• ○ It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.
• ○ It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.

Select an option, then click Submit answer.

• ○ Lookup is done on the first packet from the session originator
• ○ Lookup is done on the last packet sent from the responder
• ○ Lookup is done on every packet, regardless of direction
• ○ Lookup is done on the first reply packet from the responder

Select an option, then click Submit answer.

• ○ It always authorizes the traffic without requiring authentication.
• ○ It drops the traffic
• ○ It authenticates the traffic using the authentication scheme SCHEME2.
• ○ It authenticates the traffic using the authentication scheme SCHEME1.

Select an option, then click Submit answer.

• ○ A phase 2 configuration is not required.
• ○ This VPN cannot be used as part of a hub-and-spoke topology.
• ○ A virtual IPsec interface is automatically created after the phase 1 configuration is completed.
• ○ The IPsec firewall policies must be placed at the top of the list.

Select an option, then click Submit answer.

• ○ FortiGate will only activate the port1 route in the routing table.
• ○ FortiGate will use the port1 route as the primary candidate.
• ○ FortiGate will load balance all traffic across both routes.
• ○ FortiGate will route twice as much traffic to the port2 route.

Select an option, then click Submit answer.

• ○ Main mode does not support XAuth for user authentication.
• ○ In aggressive mode, the remote peers are able to provide their peer IDs in the first message.
• ○ FortiGate is able to handle NATed connections only in aggressive mode.
• ○ FortiClient supports only aggressive mode.

Select an option, then click Submit answer.

• ○ IPS engine updates can be obtained using only push updates.
• ○ FortiGate IPS update requests are sent using UDP port 443.
• ○ IPS signature update requests are sent to update.fortiguard.net.
• ○ Protocol decoder update requests are sent to sevice.fortiguard.net.

Select an option, then click Submit answer.

• ○ As the source in a firewall policy
• ○ As the destination in a firewall policy
• ○ As the destination in a proxy policy
• ○ As the source in a proxy policy

Select an option, then click Submit answer.

• ○ Signature verification
• ○ Authentication
• ○ Data integrity
• ○ Non-deniability