NSE4_FGT-6.4無料問題集「Fortinet NSE 4

質問 1

Examine the exhibit, which contains a virtual IP and firewall policy configuration.

The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

（A）10.200.1.10

（B）10.0.1.254

（C）10.200.1.1

（D）Any available IP address in the WAN (port1) subnet 10.200.1.0/24

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must an administrator do to achieve this objective?

（A）The administrator can register the same FortiToken on more than one FortiGate.

（B）The administrator can use a third-party radius OTP server.

（C）The administrator must use the user self-registration server.

（D）The administrator must use a FortiAuthenticator device.

正解：D 解答を投票する

質問 3

Which two statements are true when FortiGate is in transparent mode? (Choose two.)

（A）By default, all interfaces are part of the same broadcast domain.

（B）FortiGate forwards frames without changing the MAC address.

（C）The existing network IP schema must be changed when installing a transparent mode.

（D）Static routes are required to allow traffic to the next hop.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

（A）www.example.com

（B）www.example.com/index.html

（C）example.com

（D）www.example.com:443

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)

（A）Ethernet header

（B）Application header

（C）Interface name

（D）Packet payload

（E）IP header

正解：C、D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which of statement is true about SSL VPN web mode?

（A）The tunnel is up while the client is connected.

（B）The external network application sends data through the VPN.

（C）It assigns a virtual IP address to the client.

（D）It supports a limited number of protocols.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

（A）Flow-based inspection

（B）Certificate inspection

（C）Full Content inspection

（D）Proxy-based inspection

正解：A 解答を投票する

質問 8

In an explicit proxy setup, where is the authentication method and database configured?

（A）Proxy Policy

（B）Authentication Rule

（C）Authentication scheme

（D）Firewall Policy

正解：C 解答を投票する

質問 9

Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.

An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

（A）A DoS policy should be used, instead of an IPS sensor.

（B）The IPS filter is missing the Protocol: HTTPS option.

（C）The firewall policy is not using a full SSL inspection profile.

（D）The HTTPS signatures have not been added to the sensor.

（E）A DoS policy should be used, instead of an IPS sensor.

正解：C 解答を投票する

質問 10

Refer to the exhibit.

The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

（A）port2

（B）port4

（C）port1

（D）port3

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSE4_FGT-6.4 無料問題集「Fortinet NSE 4 - FortiOS 6.4」

弊社を連絡する

関連リンク

トップ試験