Free Fortinet NSE4_FGT-6.0 Exam Dumps Questions & Answers

How can you block or allow to Twitter using a firewall policy?

• A.  Configure the Action field as Learn and select Twitter.
• B.  Configure the Source field as Internet Service objects for Twitter.
• C.  Configure the Destination field as Internet Service objects for Twitter.
• D.  Configure the Service field as Internet Service objects for Twitter.

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

• A.  By default, split tunneling is enabled.
• B.  By default, the SSL VPN portal requires the installation of a client's certificate.
• C.  By default, FortiGate uses WINS servers to resolve names.
• D.  By default, the admin GUI and SSL VPN portal use the same HTTPS port.

You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

• A.  IP/Network Mask.
• B.  Role: Security Fabric.
• C.  Administrative Access: FortiTelemetry.
• D.  Device detection enabled.

View the exhibit.

VDOM1 is operating in transparent mode VDOM2 is operating in NAT Route mode. There is an inteface VDOM link between both VDOMs. A client workstation with the IP address 10.0.1.10/24 is connected to port2. A web server with the IP address 10.200.1.2/24 is connected to port1.
What is required in the FortiGate configuration to route and allow connections from the client workstation to the web server? (Choose two.)

• A.  One firewall policy in VDOM1 with port2 as the source interface and InterVDOM0 as the destination interface.
• B.  A static or dynamic route in VDOM1 with the subnet 10.200.1.0/24 as the destination.
• C.  One firewall policy in VDOM2 with InterVDOM1 as the source interface and port1 as the destination interface.
• D.  A static or dynamic route in VDOM2 with the subnet 10.0.1.0/24 as the destination.

Why must you use aggressive mode when a local FortiGate IPSec gateway hosts multiple dialup tunnels?

• A.  In aggressive mode, the remote peers are able to provide their peer IDs in the first message.
• B.  FortiClient only supports aggressive mode.
• C.  FortiGate is able to handle NATed connections only in aggressive mode.
• D.  Main mode does not support XAuth for user authentication.