NSE4_FGT-6.2 sample questions

Question 1

An administrator is attempting to allow access to https://fortinet.com through a firewall policy that is configured with a web filter and an SSL inspection profile configured for deep inspection.

Which two actions can eliminate the certificate error generated by deep inspection? (Choose two.)

Accepted Answer

Manually install the FortiGate deep inspection certificate as a trusted CA

Accepted Answer

Configure an SSL-inspection exemption for fortinet.co

Answer

Configure fortinet.com access to bypass the IPS engin

Answer

Implement firewall authentication for all users that need access to fortinet.com

Question 2

How does FortiGate verify the login credentials of a remote LDAP user?

Accepted Answer

FortiGate sends the user-entered credentials to the LDAP server for authentication.

Answer

FortiGate regenerates the algorithm based on the login credentials and compares it to the algorithm stored on the LDAP server.

Answer

FortiGate queries its own database for credentials.

Answer

FortiGate queries the LDAP server for credentials.

Question 3

Which statement about the firewall policy authentication timeout is true?

Accepted Answer

It is an idle timeout. The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source IP.

Answer

It is a hard timeout. The FortiGate removes the temporary policy for a user’s source IP address after this timer has expired.

Answer

It is a hard timeout. The FortiGate removes the temporary policy for a user’s source MAC address after this timer has expired.

Answer

It is an idle timeout. The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source MAC.

Question 4

By default, when logging to disk, when does FortiGate delete logs?

Accepted Answer

7 days

Answer

Never

Answer

1 year

Answer

30 days

Question 5

Which two statements about conserve mode are true? (Choose two.)

Accepted Answer

FortiGate stops sending files to FortiSandbox for inspection.

Accepted Answer

Administrators cannot change the configuratio

Answer

FortiGate stops doing RPF checks over incoming packets

Answer

Administrators can access the FortiGate only through the console port.

Question 6

An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt, or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.

What is a possible reason for this?

Accepted Answer

The firewall policy is not using a full SSL inspection profile.

Answer

a DoS policy should be used, instead of an IPS sensor.

Answer

The IPS filter is missing the Protocol:HTTPS option.

Answer

The HTTPS signatures have not been added to the sensor.

Top vendors

Top exams

Free NSE4_FGT-6.2 sample questions

An administrator is attempting to allow access to https://fortinet.com through a firewall policy that is configured with a web filter and an SSL inspection profile configured for deep inspection. Which two actions can eliminate the certificate error generated by deep inspection? (Choose two.)

How does FortiGate verify the login credentials of a remote LDAP user?

Which statement about the firewall policy authentication timeout is true?

By default, when logging to disk, when does FortiGate delete logs?

Which two statements about conserve mode are true? (Choose two.)

An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt, or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic. What is a possible reason for this?

6 more free samples are waiting