最新的Fortinet NSE 4 - FortiOS 5.6 - NSE4_FGT-5.6免費考試真題

A. 10.0.1.0/24

B. 0 10.0.0.0/8

C. 0 0.0.0.0/0 0

D. 10.0.2.0/24

A. They support L2TP-over-IPsec tunnels

B. A virtual IPsec interface is automatically created after a phase 1 is added to the configuration

C. They require firewall policies with the Action set to IPsec

D. They can be created in transparent mode VDOMs

A. Switching from proxy-based mode to flow-based, then back to proxy-based mode, will not result in the original configuration.

B. Proxy-based inspection is not available in VDOMs operating in transparent mode.

C. The default inspection mode is proxy based.

D. Flow-based profiles must be manually converted to proxy-based profiles before changing the inspection mode from flow based to proxy based.

A. FortiGate queries its own database for credentials.

B. FortiGate queries the LDAP server for credentials.

C. FortiGate re-generates the algorithm based on the login credentials and compares it against the algorithm stored on the LDAP server.

D. FortiGate sends the user entered credentials to the LDAP server for authentication.

A. FortiGate has entered in to system conserve mode.

B. By default, the FortiGate blocks new sessions.

C. FortiGate generated an event log for system conserve mode.

D. FortiGate changed the global av-failopen settings to idledrop.

A. Both source interface and destination interface of the firewall policy

B. Source interface of the firewall policy only

C. Destination interface of the firewall policy only

D. All interfaces of FortiGate

A. It is an IPsec extension that forces remote VPN users to authenticate using their local ID.

B. It is an IPsec extension that forces remote VPN users to authenticate using their credentials (user name and password).

C. It is an IPsec extension that authenticates remote VPN peers using a preshared key.

D. It is an IPsec extension that authenticates remote VPN peers using digital certificates.

A. Administrative account is admin

B. Mode of operation is transparent

C. Default gateway IP is 192.168.1.1 using porn (or internal) interface

D. Port1 (or internal) interface IP is 192.168.1.99/24

E. Password for administrative access is Fortinet

A. SD-WAN provides route failover protection, but cannot load-balance traffic.

B. An SD-WAN static route does not require a next-hop gateway IP address.

C. FortiGate supports only one SD-WAN interface per VDOM.

D. Each member interface requires its own firewall policy to allow traffic.