NSE4_FGT-5.6 Certification Exam Questions with AI Explanations

QUESTION: 31

Examine the routing database.

Which of the following statements are correct?
(Choose two.)

The port3 default route has the lowest metric, making it the best route.
There will be eight routes active in the routing table.
The port3 default has a higher distance than the port1 and port2 default routes.
Both port1 and port2 default routers are active in the routing table.

Answer(s): C,D

Reveal Solution Next Question

QUESTION: 32

What is the purpose of enabling LEARN as the Action on a firewall policy? Response:

It monitors a specific firewall policy and a report provides recommendations for that firewall policy
It creates learning logs on a global level
It compiles security feature activity from various security-related logs, such as virus and attack logs
It captures data across all traffic and security vectors and generates learning logs and a report with recommendations

Answer(s): D

Reveal Solution Next Question

An administrator configured antivirus in flow-based inspection mode on the FortiGate.
While testing the configuration, the administrator noticed that eicar.com test files can be downloaded using HTTPS protocol only.

What is causing this issue?

HTTPS protocol is not enabled under Inspected Protocols.
Full-content inspection for HTTPS is disabled.
Hardware acceleration is in use.
The test file is larger than the oversize limit.

Answer(s): B

Reveal Solution Next Question

QUESTION: 34

Which statement is true regarding account permissions for an administrator that is assigned the default prof_admin profile?

It can create new administrator accounts with the super_admin profile.
It can reset the password for the admin account.
It can create administrator accounts with access to the same virtual domain (VDOM).
It has access to the global settings of the FortiGate.

Answer(s): C

Reveal Solution Next Question

QUESTION: 35

If Comfort Clients is disabled, which of the following statements are correct regarding proxy-based antivirus scan?
(Choose three.)

If a virus is detected, a block replacement message is displayed immediately.
The AV engine starts scanning after the whole file is buffered.
Files cannot be sent to FortiSandbox for inspection.
The client must wait for the antivirus scan to finish scanning to receive the file.
It uses the IPS engine and embedded compact antivirus database.

Answer(s): A,B,D

Reveal Solution Next Question

Fortinet NSE 4 - FortiOS 5.6 NSE4_FGT-5.6 Dumps in PDF

Free Fortinet NSE4_FGT-5.6 Real Questions (page: 21)

QUESTION: 31

QUESTION: 32

QUESTION: 33

QUESTION: 34

QUESTION: 35