NSE4_FGT-6.4 Exam dumps PDF | Exam-Dumps.net (Page: 3)

QUESTION: 11

Which two statements ate true about the Security Fabric rating? (Choose two.)

It provides executive summaries of the four largest areas of security focus.
Many of the security issues can be fixed immediately by click ng Apply where available.
The Security Fabric rating must be run on the root FortiGate device in the Security Fabric.
The Security Fabric rating is a free service that comes bundled with alt FortiGate devices.

Answer(s): B,C

Explanation:

FortiGate_Security_6.4_Study_Guide-Online. page 89

Reveal Solution Next Question

QUESTION: 12

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

System time
FortiGuaid update servers
Operating mode
NGFW mode

Answer(s): C,D

Explanation:

C: "Operating mode is per-VDOM setting. You can combine transparent mode VDOM's with NAT mode VDOMs on the same physical Fortigate.
D: "Inspection-mode selection has moved from VDOM to firewall policy, and the default inspection- mode is flow, so NGFW Mode can be changed from Profile-base (Default) to Policy-base directly in System > Settings from the VDOM" Page 125 of FortiGate_Infrastructure_6.4_Study_Guide

Reveal Solution Next Question

QUESTION: 13

An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.

Which subnet must the administrator configure for the local quick mode selector for site B?

192.168.1.0/24
192.168.0.0/24
192.168.2.0/24
192.168.3.0/24

Answer(s): C

Reveal Solution Next Question

QUESTION: 14

An administrator does not want to report the logon events of service accounts to FortiGate.
What setting on the collector agent is required to achieve this?

Add the support of NTLM authentication.
Add user accounts to Active Directory (AD).
Add user accounts to the FortiGate group fitter.
Add user accounts to the Ignore User List.

Answer(s): D

Reveal Solution Next Question

QUESTION: 15

Refer to the exhibits.

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

The SSL inspection needs to be a deep content inspection.
Force access to Facebook using the HTTP service.
Additional application signatures are required to add to the security policy.
Add Facebook in the URL category in the security policy.

Answer(s): A

Reveal Solution Next Question

Fortinet NSE4_FGT-6.4 Exam (page: 3) Fortinet NSE 4 - FortiOS 6.4 Updated on: 10-Mar-2026

QUESTION: 11

Explanation:

QUESTION: 12

Explanation:

QUESTION: 13

QUESTION: 14

QUESTION: 15

Fortinet NSE4_FGT-6.4 Exam (page: 3)
Fortinet NSE 4 - FortiOS 6.4
Updated on: 10-Mar-2026