Free Fortinet NSE4_FGT-6.2 Exam Dumps Questions & Answers

View the exhibit.

A
user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

• A.  Addicting.Games is allowed based on the Application Overrides configuration.
• B.  Addicting.Games is blocked on the Filter Overrides configuration.
• C.  Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.
• D.  Addcting.Games is allowed based on the Categories configuration.

If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

• A.  The Services field removes the requirement of creating multiple VIPs for different services.
• B.  The Services field does not allow multiple sources of traffic, to use multiple services, to connect to a single computer.
• C.  The Services field does not allow source NAT and destination NAT to be combined in the same policy.
• D.  The Services field is used when several VIPs need to be bundled into VIP groups.

An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

• A.  This VPN cannot be used as part of a hub-and-spoke topology.
• B.  The IPsec firewall policies must be placed at the top of the list.
• C.  A virtual IPsec interface is automatically created after the phase 1 configuration is completed.
• D.  A phase 2 configuration is not required.

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

• A.  Only secondary FortiGate devices are rebooted.
• B.  Traffic load balancing is temporally disabled while upgrading the firmware.
• C.  The firmware image must be manually uploaded to each FortiGate.
• D.  Uninterruptable upgrade is enabled by default.

Which statements about antivirus scanning mode are true? (Choose two.)

• A.  In quick scan mode, you can configure antivirus profiles to use any of the available signature data bases.
• B.  In proxy-based inspection mode antivirus buffers the whole file for scarring before sending it to the client.
• C.  In proxy-based inspection mode, if a virus is detected, a replacement message may not be displayed immediately.
• D.  In flow-based inspection mode, you can use the CLI to configure antivirus profiles to use protocol option profiles.