NSE4_FGT-6.2無料問題集「Fortinet NSE 4

質問 1

What settings must you configure to ensure FortiGate generates logs for web filter activity on a firewall policy called Full Access? (Choose two.)

（A）Enable disk logging.

（B）Enable Event Logging.

（C）Enable Log Allowed Traffic on the Full Access firewall policy.

（D）Enable a web filter security profile on the Full Access firewall policy.

正解：C、D 解答を投票する

質問 2

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

（A）Source IP is translated to the outgoing interface IP.

（B）This is known as many-to-one NAT.

（C）Port address translation is not used.

（D）Connections are tracked using source port and source MAC address.

正解：A、B 解答を投票する

質問 3

Which statement is true regarding SSL VPN timers? (Choose two.)

（A）SSL VPN settings do not have customizable timers.

（B）Prevent SSL VPN users from being logged out because of high network latency.

（C）Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.

（D）Allow to mitigate DoS attacks from partial HTTP requests.

正解：B、D 解答を投票する

質問 4

An administrator wants to create a policy-based IPsec VPN tunnel betweeb two FortiGate devices. Which configuration steps must be performed on both devices to support this scenario? (Choose three.)

（A）Define the phase 2 parameters.

（B）Define the phase 1 parameters, without enabling IPsec interface mode

（C）Set the phase 2 encapsulation method to transport mode

（D）Define a route to the remote network over the IPsec tunnel.

（E）Define at least one firewall policy, with the action set to IPsec.

正解：A、B、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

How can you block or allow to Twitter using a firewall policy?

（A）Configure the Service field as Internet Service objects for Twitter.

（B）Configure the Action field as Learn and select Twitter.

（C）Configure the Source field as Internet Service objects for Twitter.

（D）Configure the Destination field as Internet Service objects for Twitter.

正解：D 解答を投票する

質問 6

Examine the two static routes shown in the exhibit, then answer the following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

（A）FortiGate will use the port1 route as the primary candidate.

（B）FortiGate will only actuate the port1 route in the routing table

（C）FortiGate will route twice as much traffic to the port2 route

（D）FortiGate will load balance all traffic across both routes.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which statements correctly describe transparent mode operation? (Choose three.)

（A）It permits inline traffic inspection and firewalling without changing the IP scheme of the network.

（B）All interfaces of the transparent mode FortiGate device must be on different IP subnets.

（C）The transparent FortiGate is visible to network hosts in an IP traceroute.

（D）FortiGate acts as transparent bridge and forwards traffic at Layer 2.

（E）Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.

正解：A、D、E 解答を投票する

質問 8

How does FortiGate verify the login credentials of a remote LDAP user?

（A）FortiGate regenerates the algorithm based on the login credentials and compares it to the algorithm stored on the LDAP server.

（B）FortiGate queries the LDAP server for credentials.

（C）FortiGate sends the user-entered credentials to the LDAP server for authentication.

（D）FortiGate queries its own database for credentials.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

（A）Downstream FortiGate

（B）FortiAnalyzer

（C）Root FortiGate

（D）FortiManager

正解：C 解答を投票する

質問 10

Examine the FortiGate configuration:

What will happen to unauthenticated users when an active authentication policy is followed by a fall through policy without authentication?

（A）The user must log in again to authenticate.

（B）The user will be denied access to resources without authentication.

（C）The user will not be prompted for authentication.

（D）User authentication happens at an interface level.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSE4_FGT-6.2 無料問題集「Fortinet NSE 4 - FortiOS 6.2」

弊社を連絡する

関連リンク

トップ試験