Online Access Free NSE4_FGT-5.6 Exam Questions

How are the application control signatures updated on a FortiGate device?
Response:

• A.By clicking Update Signatures in the application control profile.
• B.By upgrading the FortiOS firmware to a newer release.
• C.Through FortiGuard updates.
• D.By running the application control auto-learning feature.

What methods can you use to back up logs?
(Choose three.)
Response:

• A.TFTP
• B.USB
• C.SNMP
• D.FTP
• E.SFTP

View the exhibit.


Which of the following statements are correct?
(Choose two.)
Response:

• A.This setup requires at least two firewall policies with action set to IPsec.
• B.The TunnelB route is the primary one for searching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
• C.This is a redundant IPsec setup.
• D.Dead peer detection must be disabled to support this type of IPsec setup.

Examine this FortiGate configuration:
config system global
set av-failopen pass
set fail-open disable
end
Examine the output of the following debug command:
# diagnose hardware sysinfo conserve
memory conserve mode: on
total RAM: 3040 MB
memory used: 2706 MB 89% of total RAM
memory used threshold extreme: 2887 MB 95% of total RAM
memory used threshold red: 2675 MB 88% of total RAM
memory used threshold green: 2492 MB 82% of total RAM
Based on the diagnostics outputs above, how is the FortiGate handling packets that require IPS inspection?
Response:

• A.They are allowed, but with no inspection.
• B.They are allowed and inspected as long as no additional proxy-based inspection is required.
• C.They are allowed and inspected.
• D.They are dropped.

Which file names will match the *.tiff file name pattern configured in a data leak prevention filter?
(Choose two.)
Response:

• A.tiff.tiff
• B.tiff.jpeg
• C.tiff.png
• D.gif.tiff