Free Fortinet NSE4_FGT-5.6 Exam Dumps Questions & Answers

To create a valid traffic shaping policy, which of the following matching criteria must align between a traffic shaping policy and a firewall policy?
(Choose three.)
Response:

• A.  Schedule
• B.  Source
• C.  Service
• D.  Incoming interface
• E.  Destination

Examine the CLI configuration. What does this configuration do?
(Choose two.)
config system setting
set ses-denied-traffic enable
end
Response:

• A.  It reduces the amount of logs generated by denied traffic.
• B.  It reduces the amount of logs generated by denied traffic.
• C.  It sends an alert notification to the administrator upon detecting denied traffic.
• D.  It creates a session for traffic being denied.

Which of the following statements regarding FortiGate inspection modes are correct?
(Choose three.)
Response:

• A.  Security profiles must be manually converted to flow-based before switching the inspection mode from proxy-based to flow-based.
• B.  Switching from proxy-based to flow-based and then back to proxy-based will not produce original configurations.
• C.  Switching from proxy-based inspection mode to flow-based inspection mode will result in a warning message.
• D.  Flow-based is the default FortiGate inspection mode.
• E.  Proxy-based inspection mode supports more features.

If you've lost your password for the admin account on your FortiGate, how can you reset it?
Response:

• A.  Hard reboot the FortiGate. Through the local console, interrupt the boot loader by pressing any key and then log in as maintainer. Enter the CLI commands required to set the password for the admin account.
• B.  Hard reboot the FortiGate. Through the local console, once the FortiGate is booted up, log in as maintainer. Enter the CLI commands to set the password for the admin account.
• C.  Hard reboot the FortiGate. Click Reset Password on the login window.
• D.  Hard reboot the FortiGate. Run the execute reset-password command from the CLI.

What is the Unknown Applications category option in the application control profile?
Response:

• A.  Any traffic that does not match the RFC pattern for its protocol.
• B.  Any traffic that does not match an application control signature.
• C.  Any traffic whose packet fails the CRC check.
• D.  Any traffic that matches custom application control signatures.