NSE4_FGT-6.2 exam

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)A . It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.B . ADVPN is only supported with IKEv2.C . Tunnels are negotiated dynamically between spokes.D . Every spoke requires a static tunnel...

Examine the exhibit, which shows the partial output of an IKE real-time debug. Which of the following statement about the output is true?A . The VPN is configured to use pre-shared key authentication.B . Extended authentication (XAuth) was successful.C . Remote is the host name of the remote IPsec peer.D...

Examine this PAC file configuration. Which of the following statements are true? (Choose two.)A . Browsers can be configured to retrieve this PAC file from the FortiGate.B . Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.C . All requests not made to Fortinet.com or the...

View the certificate shown to the exhibit, and then answer the following question: The CA issued this certificate to which entity?A . A root CAB . A personC . A bridge CAD . A subordinate CAView AnswerAnswer: A

Which statements about antivirus scanning mode are true? (Choose two.)A . In proxy-based inspection mode antivirus buffers the whole file for scarring before sending it to the client.B . In flow-based inspection mode, you can use the CLI to configure antivirus profiles to use protocol option profiles.C . In proxy-based...

Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)A . PriorityB . MetricC . DistanceD . CostView AnswerAnswer: A C

Which one of the following processes is involved in updating IPS from FortiGuard?A . FortiGate IPS update requests are sent using UDP port 443.B . Protocol decoder update requests are sent to service.fortiguard.net.C . IPS signature update requests are sent to update.fortiguard.net.D . IPS engine updates can only be obtained...

Examine this PAC file configuration. Which of the following statements are true? (Choose two.)A . Browsers can be configured to retrieve this PAC file from the FortiGate.B . Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.C . All requests not made to Fortinet.com or the...

View the exhibit. A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?A . Addicting.Games is allowed based on the Application Overrides configuration.B . Addicting.Games is blocked on the Filter Overrides configuration.C . Addicting.Games can be allowed only if...

Examine the exhibit, which shows the output of a web filtering real time debug. Why is the site www.bing.com being blocked?A . The web site www.bing.com is categorized by FortiGuard as Malicious Websites.B . The user has not authenticated with the FortiGate yet.C . The web server IP address 204.79.197.200...