NSE4_FGT-6.2試験無料問題集（142題）「Fortinet NSE 4

出題：1

Which statement regarding the firewall policy authentication timeout is true?

A. It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.

B. It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.

C. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.

D. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.

正解：D 解答を投票する

出題：2

A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to support this request?

A. Implement web filter quotas for the specified website.

B. Implement a web filter category override for the specified website.

C. Implement web filter authentication for the specified website

D. Implement DNS filter for the specified website.

正解：B 解答を投票する

出題：3

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

A. The firmware image must be manually uploaded to each FortiGate.

B. Traffic load balancing is temporally disabled while upgrading the firmware.

C. Uninterruptable upgrade is enabled by default.

D. Only secondary FortiGate devices are rebooted.

正解：B,C 解答を投票する

出題：4

Which Statements about virtual domains (VDOMs) arc true? (Choose two.)

A. Different VLAN sub-interface of the same physical interface can be assigned to different VDOMs.

B. Each VDOM has its own routing table.

C. Each VDOM can be configured with different system hostnames.

D. Transparent mode and NAT/Route mode VDOMs cannot be combined on the same FortiGate.

正解：A,B 解答を投票する

出題：5

View the exhibit.

A
user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

A. Addcting.Games is allowed based on the Categories configuration.

B. Addicting.Games is allowed based on the Application Overrides configuration.

C. Addicting.Games is blocked on the Filter Overrides configuration.

D. Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.

正解：B 解答を投票する

出題：6

When using WPAD DNS method, which FQDN format do browsers use to query the DNS server?

A. srv_proxy.<local-domain>/wpad.dat

B. wpad.<local-domain>

C. proxy.<local-domain>.wpad

D. srv_tcp.wpad.<local-domain>

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

View the following exhibit, which shows the firewall policies and the object uses in the firewall policies.

The administrator is using the Policy Lookup feature and has entered the search create shown in the following exhibit.

Which of the following will be highlighted based on the input criteria?

A. Policy with ID 5.

B. Policy with ID 4.

C. Policies with ID 2 and 3.

D. Policy with ID1.

正解：D 解答を投票する

出題：8

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

A. To generate logs

B. To remove the NAT operation.

C. To finish any inspection operations.

D. To allow for out-of-order packets that could arrive after the FIN/ACK packets.

正解：D 解答を投票する

出題：9

View the exhibit.

Based on this output, which statements are correct? (Choose two.)

A. The FortiGate devices have three VDOMs.

B. The all VDOM is not synchronized between the primary and secondary FortiGate devices.

C. The root VDOM is not synchronized between the primary and secondary FortiGate devices.

D. The global configuration is synchronized between the primary and secondary FortiGate devices.

正解：C,D 解答を投票する

出題：10

What FortiGate configuration is required to actively prompt users for credentials?

A. You must enable the Authentication setting on the firewall policy

B. You must assign users to a group for active authentication

C. You must enable one or more protocols that support active authentication on a firewall policy.

D. You must position the firewall policy for active authentication before a firewall policy for passive authentication

正解：C 解答を投票する

NSE4_FGT-6.2試験無料問題集「Fortinet NSE 4 - FortiOS 6.2 認定」