NSE 4 - FortiOS 6.4 Exam Questions PDF download

QUESTION: 26

Refer to the exhibit.

Which contains a session diagnostic output.
Which statement is true about the session diagnostic output?

The session is in SYN_SENT state.
The session is in FIN_ACK state.
The session is in FTN_WAIT state.
The session is in ESTABLISHED state.

Answer(s): A

Explanation:

Indicates TCP (proto=6) session in SYN_SENT state (proto=state=2) https://kb.fortinet.com/kb/viewContent.do?externalId=FD30042

Reveal Solution Next Question

QUESTION: 27

Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

The debug flow is of ICMP traffic.
A firewall policy allowed the connection.
A new traffic session is created.
The default route is required to receive a reply.

Answer(s): A,C

Reveal Solution Next Question

In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies.
Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)

The IP version of the sources and destinations in a firewall policy must be different.
The Incoming Interface. Outgoing Interface. Schedule, and Service fields can be shared with both IPv4 and IPv6.
The policy table in the GUI can be filtered to display policies with IPv4, IPv6 or IPv4 and IPv6 sources and destinations.
The IP version of the sources and destinations in a policy must match.
The policy table in the GUI will be consolidated to display policies with IPv4 and IPv6 sources and destinations.

Answer(s): B,D,E

Reveal Solution Next Question

QUESTION: 29

Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies.
What does the Administrator account need to access the FortiGate global settings?