Free Fortinet NSE4_FGT-6.0 Exam Dumps Questions & Answers

Examine the two static routes shown in the exhibit, then answer the following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

• A.  FortiGate will load balance all traffic across both routes.
• B.  FortiGate will route twice as much traffic to the port2 route
• C.  FortiGate will only actuate the port1 route in the routing table
• D.  FortiGate will use the port1 route as the primary candidate.

Which of the following services can be inspected by the DLP profile? (Choose three.)

• A.  HTTP-POST
• B.  IMAP
• C.  CIFS
• D.  FTP
• E.  NFS

View the exhibit:

The client cannot connect to the HTTP web server. The administrator ran the FortiGate built-in sniffer and got the following output:

What should be done next to troubleshoot the problem?

• A.  Execute another sniffer in the FortiGate, this time with the filter "host 10.0.1.10".
• B.  Run a sniffer in the web server.
• C.  Execute a debug flow.
• D.  Capture the traffic using an external sniffer connected to port1.

An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)

• A.  Configure split tunneling for content inspection.
• B.  Configure a client integrity check (host-check).
• C.  Configure SSL offloading to a content processor (FortiASIC).
• D.  Configure host restrictions by IP or MAC address.
• E.  Configure two-factor authentication using security certificates.

An administrator has configured a dialup IPsec VPN with XAuth. Which statement best describes what occurs during this scenario?

• A.  Dialup clients must provide their local ID during phase 2 negotiations.
• B.  Only digital certificates will be accepted as an authentication method in phase 1.C
• C.  Phase 1 negotiations will skip preshared key exchange.
• D.  Dialup clients must provide a username and password for authentication.