Fortinet NSE4_FGT-6.2 - Fortinet NSE4 - FortiOS 6.2 Exam
Page: 3 / 24
Total 119 questions
Question #11 (Topic: Topic 1)
Consider a new IPsec deployment with the following criteria:
✑ All satellite offices must connect to the two HQ sites.
✑ The satellite offices do not need to communicate directly with other satellite offices.
✑ Backup VPN is not required.
✑ The design should minimize the number of tunnels being configured.
Which topology should you use to satisfy all of the requirements?
✑ All satellite offices must connect to the two HQ sites.
✑ The satellite offices do not need to communicate directly with other satellite offices.
✑ Backup VPN is not required.
✑ The design should minimize the number of tunnels being configured.
Which topology should you use to satisfy all of the requirements?
A. Partial mesh
B. Redundant
C. Full mesh
D. Hub-and-spoke
Answer: D
Question #12 (Topic: Topic 1)
What criteria does FortiGate use to look for a matching firewall policy to process traffic? (Choose two.)
A. Services defined in the firewall policy.
B. Incoming and outgoing interfaces
C. Highest to lowest priority defined in the firewall policy.
D. Lowest to highest policy ID number.
Answer: AB
Question #13 (Topic: Topic 1)
Refer to the exhibit.
You are configuring the root FortiGate to implement the Security Fabric. You are configuring port10 to communicate with a downstream FortiGate. The exhibit
shows the default Edit Interface.
[Fortinet-NSE4-FGT-6.2-1.0/xmlfile-8_1.png]
When configuring the root FortiGate to communicate with a downstream FortiGate, which two settings must you configure? (Choose two.)
You are configuring the root FortiGate to implement the Security Fabric. You are configuring port10 to communicate with a downstream FortiGate. The exhibit
shows the default Edit Interface.
[Fortinet-NSE4-FGT-6.2-1.0/xmlfile-8_1.png]
When configuring the root FortiGate to communicate with a downstream FortiGate, which two settings must you configure? (Choose two.)
A. Enable Device Detection
B. Administrative Access: FortiTelemetry.
C. IP/Network Mask.
D. Role: Security Fabric.
Answer: BC
Question #14 (Topic: Topic 1)
Which two statements about NTLM authentication are correct? (Choose two.)
A. It requires DC agents on every domain controller when used in multidomain environments.
B. It is useful when users log in to DCs that are not monitored by a collector agent.
C. It requires NTLM-enabled web browsers.
D. It takes over as the primary authentication method when configured alongside FSSO.
Answer: BC
Question #15 (Topic: Topic 1)
Refer to the exhibit.
[Fortinet-NSE4-FGT-6.2-1.0/xmlfile-10_1.jpg]
A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used, at the same time, for all traffic
destined for 172.20.2.0/24.
Given the network diagram shown in the exhibit, which two static routes will satisfy this requirement on FGT1? (Choose two.)
[Fortinet-NSE4-FGT-6.2-1.0/xmlfile-10_1.jpg]
A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used, at the same time, for all traffic
destined for 172.20.2.0/24.
Given the network diagram shown in the exhibit, which two static routes will satisfy this requirement on FGT1? (Choose two.)
A. 172.20.2.0/24 [1/0] via 10.10.1.2, port1 [0/0]
B. 172.20.2.0/24 [25/0] via 10.30.3.2, port3 [5/0]
C. 172.20.2.0/24 [25/0] via 10.10.1.2, port1 [5/0]
D. 172.20.2.0/24 [1/150] via 10.30.3.2, port3 [10/0]
Answer: BC
