最新のNSE4_FGT-6.2問題集で試験を準備する

Fortinet NSE4_FGT-6.2 試験概要:

Fortinet NSE4_FGT-6.2 試験シラバストピック:

Fortinet NSE 4 - FortiOS 6.2 認定 NSE4_FGT-6.2 試験問題：

1. Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

A) Allow
B) Learn
C) Warning
D) Exempt

2. Which statements about HA for FortiGate devices are true? (Choose two.)

A) Virtual clustering can be configured between two FortiGate devices that have multiple VDOMs.
B) Sessions handled by proxy-based security profiles cannot be synchronized.
C) HA management interface settings are synchronized between cluster members.
D) Heartbeat interfaces are not required on the primary device.

3. Why must you use aggressive mode when a local FortiGate IPSec gateway hosts multiple dialup tunnels?

A) FortiGate is able to handle NATed connections only in aggressive mode.
B) Main mode does not support XAuth for user authentication.
C) In aggressive mode, the remote peers are able to provide their peer IDs in the first message.
D) FortiClient only supports aggressive mode.

4. Refer to the exhibit.

The exhibits show the firewall policies and the objects used in the firewall policies. The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.
Based on the input criteria, which of the following will be highlighted?

A) The policy with ID 1
B) The policies with ID 2 and 3
C) The policy with ID 5
D) The policy with ID 4

5. Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)

A) They can be configured in both NAT/Route and transparent operation modes.
B) They require two firewall policies: one for each directions of traffic flow.
C) They support GRE-over-IPsec.
D) They support L2TP-over-IPsec.

質問と回答：