NSE4_FGT-6.0 無料問題集「Fortinet NSE 4 - FortiOS 6.0」

（A）FortiClient only supports aggressive mode.

（B）Main mode does not support XAuth for user authentication.

（C）FortiGate is able to handle NATed connections only in aggressive mode.

（D）In aggressive mode, the remote peers are able to provide their peer IDs in the first message.

（A）It limits the scope of application control to scan application traffic based on application category only.

（B）It limits the scope of application control to scan application traffic using parent signatures only

（C）It limits the scope of application control to the browser-based technology category only.

（D）It limits the scope of application control to scan application traffic on DNS protocol only.

（A）Antivirus

（B）Web filtering

（C）Application control

（D）Web proxy

（A）The administrator must first enter the command edit global.

（B）The administrator admin does not have the privileges required to configure global settings.

（C）The global settings cannot be configured from the root VDOM context.

（D）The command config system global does not exist in FortiGate.

（A）Browsers can be configured to retrieve this PAC file from the FortiGate.

（B）Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.

（C）All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.

（D）Any web request fortinet.com is allowed to bypass the proxy.

（A）10.4.200.0/30 is directly connected, port2

（B）0.0.0.0/0 [20/0] via 10.4.200.2, port2

（C）172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]

（D）172.16.32.0/24 is directly connected, port1

（A）By default, split tunneling is enabled.

（B）By default, FortiGate uses WINS servers to resolve names.

（C）By default, the admin GUI and SSL VPN portal use the same HTTPS port.

（D）By default, the SSL VPN portal requires the installation of a client's certificate.

（A）Define the phase 2 parameters.

（B）Define the phase 1 parameters, without enabling IPsec interface mode

（C）Set the phase 2 encapsulation method to transport mode

（D）Define a route to the remote network over the IPsec tunnel.

（E）Define at least one firewall policy, with the action set to IPsec.

（A）Extended authentication (XAuth) was successful.

（B）The VPN is configured to use pre-shared key authentication.

（C）Remote is the host name of the remote IPsec peer.

（D）Phase 1 went down.

（A）AH provides strong data integrity but weak encryption.

（B）AH does not provide any data integrity or encryption.

（C）AH provides data integrity bur no encryption.

（D）AH does not support perfect forward secrecy.