Free Fortinet NSE4_FGT-6.4 Exam Dumps Questions & Answers

Refer to the exhibit.


The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

• A.  port4
• B.  port3
• C.  port2
• D.  port1

Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

• A.  SSH
• B.  FTM
• C.  HTTPS
• D.  FortiTelemetry

Refer to the exhibit.




The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

• A.  10.200.1.149
• B.  10.200.1.49
• C.  10.200.1.99
• D.  10.200.1.1

How does FortiGate act when using SSL VPN in web mode?

• A.  FortiGate acts as router.
• B.  FortiGate acts as an FDS server.
• C.  FortiGate acts as DNS server.
• D.  FortiGate acts as an HTTP reverse proxy.

Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.


An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

• A.  The IPS filter is missing the Protocol: HTTPS option.
• B.  A DoS policy should be used, instead of an IPS sensor.
• C.  The firewall policy is not using a full SSL inspection profile.
• D.  The HTTPS signatures have not been added to the sensor.
• E.  A DoS policy should be used, instead of an IPS sensor.