Free Fortinet NSE4_FGT-6.4 Exam Dumps Questions & Answers

Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

• A.  Read/Write permission for Log & Report
• B.  Read/Write permission for Firewall
• C.  CLI diagnostics commands permission
• D.  Custom permission for Network

Which three statements about a flow-based antivirus profile are correct? (Choose three.)

• A.  FortiGate buffers the whole file but transmits to the client simultaneously.
• B.  Flow-based inspection uses a hybrid of scanning modes available in proxy-based inspection.
• C.  If the virus is detected, the last packet is delivered to the client.
• D.  IPS engine handles the process as a standalone.
• E.  Optimized performance compared to proxy-based inspection.

Which of statement is true about SSL VPN web mode?

• A.  The tunnel is up while the client is connected.
• B.  It assigns a virtual IP address to the client.
• C.  It supports a limited number of protocols.
• D.  The external network application sends data through the VPN.

Which scanning technique on FortiGate can be enabled only on the CLI?

• A.  Antivirus scan
• B.  Heuristics scan
• C.  Trojan scan
• D.  Ransomware scan

Refer to the exhibit.

The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.
Which two statements are true? (Choose two.)

• A.  FortiGate SN FGVM010000064692 has the higher HA priority.
• B.  FortiGate SN FGVM010000064692 is the primary because of higher HA uptime.
• C.  FortiGate SN FGVM010000065036 HA uptime has been reset.
• D.  FortiGate devices are not in sync because one device is down.