Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).


Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

• A.The firewall policy performs the full content inspection on the file.
• B.The flow-based inspection is used, which resets the last packet to the user.
• C.The volume of traffic being inspected is too high for this model of FortiGate.
• D.The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.

Comment: *

Name: *

Email: *

Verification: *

A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.
What is the reason for the failed virus detection by FortiGate?

• A.Application control is not enabled
• B.Antivirus profile configuration is incorrect
• C.Antivirus definitions are not up to date
• D.SSL/SSH Inspection profile is incorrect

Comment: *

Name: *

Email: *

Verification: *

Which two statements are correct about a software switch on FortiGate? (Choose two.)

• A.It can be configured only when FortiGate is operating in NAT mode
• B.Can act as a Layer 2 switch as well as a Layer 3 router
• C.It can group only physical interfaces
• D.All interfaces in the software switch share the same IP address

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.
Exhibit A
https://www.fast2test.com/NSE4_FGT-6.4-practice-test.html 11
Valid Fast2test NSE4_FGT-6.4 Exam PDF Dumps - New NSE4_FGT-6.4 Real Exam Questions

Exhibit B
https://www.fast2test.com/NSE4_FGT-6.4-practice-test.html 12
Valid Fast2test NSE4_FGT-6.4 Exam PDF Dumps - New NSE4_FGT-6.4 Real Exam Questions

The SSL VPN connection fails when a user attempts to connect to it.
What should the user do to successfully connect to SSL VPN?

• A.Change the SSL VPN port on the client.
• B.Change the Server IP address.
• C.Change the idle-timeout.
• D.Change the SSL VPN portal to the tunnel.

Comment: *

Name: *

Email: *

Verification: *

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

• A.Subject value
• B.SMMIE Capabilities value
• C.Subject Key Identifier value
• D.Subject Alternative Name value

Comment: *

Name: *

Email: *

Verification: *