Fortinet NSE4_FGT-6.4 Fortinet NSE 4 – FortiOS 6.4 Online Training
Fortinet NSE4_FGT-6.4 Online Training
The questions for NSE4_FGT-6.4 were last updated at Jan 05,2025.
- Exam Code: NSE4_FGT-6.4
- Exam Name: Fortinet NSE 4 - FortiOS 6.4
- Certification Provider: Fortinet
- Latest update: Jan 05,2025
How does FortiGate act when using SSL VPN in web mode?
- A . FortiGate acts as an FDS server.
- B . FortiGate acts as an HTTP reverse proxy.
- C . FortiGate acts as DNS server.
- D . FortiGate acts as router.
Refer to the exhibit.
Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?
- A . Custom permission for Network
- B . Read/Write permission for Log & Report
- C . CLI diagnostics commands permission
- D . Read/Write permission for Firewall
Examine the exhibit, which contains a virtual IP and firewall policy configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?
- A . 10.200.1.10
- B . Any available IP address in the WAN (port1) subnet 10.200.1.0/24
- C . 10.200.1.1
- D . 10.0.1.254
Refer to the exhibits.
The SSL VPN connection fails when a user attempts to connect to it.
What should the user do to successfully connect to SSL VPN?
- A . Change the SSL VPN port on the client.
- B . Change the Server IP address.
- C . Change the idle-timeout.
- D . Change the SSL VPN portal to the tunnel.
A
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/150494
Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)
- A . DNS
- B . ping
- C . udp-echo
- D . TWAMP
How do you format the FortiGate flash disk?
- A . Load a debug FortiOS image.
- B . Load the hardware test (HQIP) image.
- C . Execute the CLI command execute formatlogdisk.
- D . Select the format boot device option from the BIOS menu.
Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.
An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine
whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?
- A . The IPS filter is missing the Protocol: HTTPS option.
- B . The HTTPS signatures have not been added to the sensor.
- C . A DoS policy should be used, instead of an IPS sensor.
- D . A DoS policy should be used, instead of an IPS sensor.
- E . The firewall policy is not using a full SSL inspection profile.
Refer to the exhibit.
The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be
applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?
- A . 10.200.1.149
- B . 10.200.1.1
- C . 10.200.1.49
- D . 10.200.1.99
Which statement about the policy ID number of a firewall policy is true?
- A . It is required to modify a firewall policy using the CLI.
- B . It represents the number of objects used in the firewall policy.
- C . It changes when firewall policies are reordered.
- D . It defines the order in which rules are processed.
Refer to the exhibit.
Which contains a Performance SLA configuration.
An administrator has configured a performance SLA on FortiGate.
Which failed to generate any traffic.
Why is FortiGate not generating any traffic for the performance SLA?
- A . Participants configured are not SD-WAN members.
- B . There may not be a static route to route the performance SLA traffic.
- C . The Ping protocol is not supported for the public servers that are configured.
- D . You need to turn on the Enable probe packets switch.
D
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/478384/performance-sla-linkmonitoring
Latest NSE4_FGT-6.4 Dumps Valid Version with 142 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund
