A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
* All traffic must be routed through the primary tunnel when both tunnels are up.
* The secondary tunnel must be used only if the primary tunnel goes down.
* In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover.
Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two.)

• A.Enable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels.
• B.Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel.
• C.Enable Dead Peer Detection.
  https://www.fast2test.com/NSE4_FGT-6.4-practice-test.html 8
  Valid Fast2test NSE4_FGT-6.4 Exam PDF Dumps - New NSE4_FGT-6.4 Real Exam Questions
• D.Configure a high distance on the static route for the primary tunnel, and a lower distance on the static route for the secondary tunnel.

Comment: *

Name: *

Email: *

Verification: *

Which scanning technique on FortiGate can be enabled only on the CLI?

• A.Antivirus scan
• B.Trojan scan
• C.Heuristics scan
• D.Ransomware scan

Comment: *

Name: *

Email: *

Verification: *

Which of the following SD-WAN load -balancing method use interface weight value to distribute traffic?
(Choose two.)

• A.Source IP
• B.Volume
• C.Session
• D.Spillover

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

• A.The sensor will gather a packet log for all matched traffic.
• B.The sensor will allow attackers matching the NTP.Spoofed.KoD.DoS signature.
• C.The sensor will reset all connections that match these signatures.
• D.The sensor will block all attacks aimed at Windows servers.

Comment: *

Name: *

Email: *

Verification: *

Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)
https://www.fast2test.com/NSE4_FGT-6.4-practice-test.html 10
Valid Fast2test NSE4_FGT-6.4 Exam PDF Dumps - New NSE4_FGT-6.4 Real Exam Questions

• A.Set the maximum session TTL value for the TELNET service object.
• B.Create a new firewall policy and place it above the existing SSLVPN policy for the SSL VPN traffic, and set the new TELNET service object in the policy.
• C.Set the session TTL on the SSLVPN policy to maximum, so the idle session timeout will not happen after
  90 minutes.
• D.Create a new service object for TELNET and set the maximum session TTL.

Comment: *

Name: *

Email: *

Verification: *