NSE4_FGT-6.4無料問題集「Fortinet NSE 4

質問 1

Refer to the exhibit to view the application control profile.

Users who use Apple FaceTime video conferences are unable to set up meetings.
In this scenario, which statement is true?

（A）Apple FaceTime belongs to the custom blocked filter.

（B）Apple FaceTime belongs to the custom monitored filter.

（C）The category of Apple FaceTime is being monitored.

（D）The category of Apple FaceTime is being blocked.

正解：A 解答を投票する

質問 2

Refer to the exhibit.

In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?

（A）Execute another sniffer in the FortiGate, this time with the filter "host 10.0.1.10"

（B）Run a sniffer on the web server.

（C）Execute a debug flow.

（D）Capture the traffic using an external sniffer connected to port1.

正解：C 解答を投票する

質問 3

View the exhibit:

Which the FortiGate handle web proxy traffic rue? (Choose two.)

（A）Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.

（B）Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.

（C）port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.

（D）port-VLAN1 is the native VLAN for the port1 physical interface.

正解：A、C 解答を投票する

質問 4

Refer to the exhibit.

The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10 .0.1.254. /24.
The first firewall policy has NAT enabled using IP Pool.
The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the internet traffic coming from a workstation with the IP address 10.0.1.10?

（A）10.200.1.10

（B）10.200.3.1

（C）10.200.1.1

（D）10.200.1.100

正解：C 解答を投票する

質問 5

Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

（A）Apple FaceTime will be allowed, based on the Categories configuration.

（B）Apple FaceTime will be allowed only if the filter in Application and Filter Overrides is set to Learn

（C）Apple FaceTime will be allowed, based on the Apple filter configuration.

（D）Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration

正解：D 解答を投票する

質問 6

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

（A）Subject Alternative Name value

（B）SMMIE Capabilities value

（C）Subject Key Identifier value

（D）Subject value

正解：C 解答を投票する

質問 7

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

（A）The NetSession Enum function is used to track user logouts.

（B）NetAPI polling can increase bandwidth usage in large networks.

（C）The collector agent must search security event logs.

（D）The collector agent uses a Windows API to query DCs for user logins.

正解：A 解答を投票する

質問 8

How do you format the FortiGate flash disk?

（A）Load a debug FortiOS image.

（B）Load the hardware test (HQIP) image.

（C）Select the format boot device option from the BIOS menu.

（D）Execute the CLI command execute formatlogdisk.

正解：C 解答を投票する

質問 9

An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

（A）Set the TTL value to never under config system-ttl

（B）Create a new service object for HTTP service and set the session TTL to never

（C）Set the session TTL on the HTTP policy to maximum

（D）Create a new firewall policy with the new HTTP service and place it above the existing HTTP policy.

正解：A、B 解答を投票する

質問 10

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?

（A）Log ID

（B）Sequence ID

（C）Policy ID

（D）Universally Unique Identifier

正解：D 解答を投票する

NSE4_FGT-6.4 無料問題集「Fortinet NSE 4 - FortiOS 6.4」

弊社を連絡する

関連リンク

トップ試験