IT認証試験問題集
毎月、GOWUKAKUは1500人以上の受験者が試験準備を助けて、試験に合格するために受験者にご協力します
 ホームページ / NSE4_FGT-6.4 問題集  / NSE4_FGT-6.4 問題練習

Fortinet NSE4_FGT-6.4 問題練習

Fortinet NSE 4 - FortiOS 6.4 試験

最新更新時間: 2024/03/19,合計94問。

【2024年3月キャンペーン】:NSE4_FGT-6.4 最新真題を買う時、日本語版と英語版両方を同時に獲得できます。

実際の問題集を練習し、試験のポイントを了解し、テストに申し込むするかどうかを決めることができます。

さらに試験準備時間の35%を節約するには、NSE4_FGT-6.4 問題集を使用してください。

 / 4

Question No : 1
Refer to the exhibit.



Which contains a Performance SLA configuration.
An administrator has configured a performance SLA on FortiGate.
Which failed to generate any traffic.
Why is FortiGate not generating any traffic for the performance SLA?

正解:
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/478384/performance-sla-linkmonitoring

Question No : 2
Which statement about the policy ID number of a firewall policy is true?

正解:

Question No : 3
Refer to the exhibit.










The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be
applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

正解:

Question No : 4
Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.






An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine
whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

正解:

Question No : 5
How do you format the FortiGate flash disk?

正解:

Question No : 6
Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

正解:

Question No : 7
Refer to the exhibits.






The SSL VPN connection fails when a user attempts to connect to it.
What should the user do to successfully connect to SSL VPN?

正解:
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/150494

Question No : 8
Examine the exhibit, which contains a virtual IP and firewall policy configuration.










The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

正解:

Question No : 9
Refer to the exhibit.



Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

正解:

Question No : 10
How does FortiGate act when using SSL VPN in web mode?

正解:

Question No : 11
An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24.
How must the administrator configure the local quick mode selector for site B?

正解:

Question No : 12
Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

正解:
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/913287/ipsec-vpn-authenticating-aremote-fortigate-peer-with-a-pre-shared-key

Question No : 13
An administrator is running the following sniffer command:
diagnose aniffer packer any "host 192.168.2.12" 5
Which three pieces of Information will be Included in me sniffer output? {Choose three.)

正解:

Question No : 14
Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

正解:

Question No : 15
Refer to the exhibit.



In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?

正解:

 / 4
Fortinet