NSE4_FGT-6.2 Exam AI-Powered | Exam-Dumps.net (Page: 1)

QUESTION: 1

Examine the FortiGate configuration:

What will happen to unauthenticated users when an active authentication policy is followed by a fall through policy without authentication?

The user must log in again to authenticate.
The user will be denied access to resources without authentication.
The user will not be prompted for authentication.
User authentication happens at an interface level.

Answer(s): A

Reference:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD46875

Reveal Solution Next Question

QUESTION: 2

Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

FG-traffic VDOM
Root VDOM
Customer VDOM
Global VDOM

Answer(s): B

Reference:

https://docs.fortinet.com/document/fortigate/6.2.0/new-features/287377/split-task- vdom-support

Reveal Solution Next Question

In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

Client > primary FortiGate> secondary FortiGate> primary FortiGate> web server.
Client > secondary FortiGate> web server.
Clinet >secondary FortiGate> primary FortiGate> web server.
Client> primary FortiGate> secondary FortiGate> web server.

Answer(s): D

Reveal Solution Next Question

QUESTION: 4

Which statements about antivirus scanning mode are true? (Choose two.)

In proxy-based inspection mode antivirus buffers the whole file for scarring before sending it to the client.
In flow-based inspection mode, you can use the CLI to configure antivirus profiles to use protocol option profiles.
In proxy-based inspection mode, if a virus is detected, a replacement message may not be displayed immediately.
In quick scan mode, you can configure antivirus profiles to use any of the available signature data bases.

Answer(s): A,B

Explanation:

A: Buffers the whole file, packets sent to the client after scan finishes-
B: When the antivirus profile is operating in flow-based inspection mode, two scanning mode options are available: full scan mode and quick scan mode.(Normal extended, or extreme-depending on what is configured in the CLI).

Reveal Solution Next Question

QUESTION: 5

The FSSO Collector Agent set to advanced access mode for the Windows Active Directory uses which of the following?

LDAP convention
NTLM convention
Windows convention NetBios\Username
RSSO convention

Answer(s): A

Reveal Solution Next Question

Fortinet NSE4_FGT-6.2 (page: 1)

QUESTION: 1

Reference:

QUESTION: 2

Reference:

QUESTION: 3

QUESTION: 4

Explanation:

QUESTION: 5