NSE4_FGT-5.6 by Fortinet Valid Free Exam Practice Test

Question 1

When using firewall policy NAT, which statements are true regarding virtual IP (VIP)?
(Choose two.)
Response:

A. FortiGate does not respond to ARP requests for VIP, as ARP responses are non configurable for VIP. B. The VIP is selected in the firewall policy source address field. C. The default type is static NAT, which applies one-to-one mappings for incoming and outgoing connections. D. The static NAT VIP can be restricted to forward only certain ports.

Correct Answer: C,D

Question 2

A FortiGate interface is configured with the following commands:

What statements about the configuration are correct?
(Choose two.)
Response:

A. FortiGate can send IPv6 router advertisements (RAs.) B. FortiGate can provide DNS settings to IPv6 clients. C. FortiGate can provide IPv6 addresses to DHCPv6 client. D. IPv6 clients connected to port1 can use SLAAC to generate their IPv6 addresses.

Correct Answer: A,D

Question 3

Which of the following configuration settings are global settings?
(Choose two.)
Response:

A. Security profiles B. HA settings C. FortiGuard settings D. Firewall policies

Correct Answer: B,C

Question 4

Which FortiGate feature sends real-time queries to the FortiGuard Distribution Network (FDN)?
Response:

A. Web filtering B. VPN C. Antivirus D. IPS

Correct Answer: A

Question 5

View the exhibit. Which statement is true regarding the configuration on the SSL-VPN Monitor page?

Response:

A. FortiGate assigns the IP address in .15-t r. n .1 to the Student SSL-VPN user. B. The Student SSL-VPN user is disconnected from the SSL-VPN and doesn't show any IP addresses under Active Connections. C. FortiGate assigns the IP address 10.200.3.1 - to the Student2 SSL-VPN user. D. FortiGate assigns IP address 10.212.134.200 to the Student2 SSL-VPN user.

Correct Answer: D

Question 6

Which statement is true about split tunneling in SSL VPN?
Response:

A. It is supported in web-only mode. B. If enabled, Internet traffic uses the local gateway of the connecting host. C. It can be enabled by the SSL VPN user, after connecting to the SSL VPN. D. If disabled, SSL VPN users must authenticate using FortiToken.

Correct Answer: B

Fortinet NSE 4 - FortiOS 5.6 - NSE4_FGT-5.6 Exam Practice Test