Online Access Free NSE4_FGT-5.6 Exam Questions

Examine the exhibit, which contains a virtual IP and a firewall policy configuration.

The WAN(port1) interface has the IP address 10.200.1.1/24. The LAN(port2) interface has the IP address 10.0.1.254/24. The top firewall policy has NAT enabled using outgoing interface address. The second firewall policy configured with a virtual IP (VIP) as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?
Response:

• A.Any available IP address in the WAN(port1) subnet 10.200.1.0/24
• B.10.200.1.1
• C.10.0.1.254
• D.10.200.1.10

What is the purpose of the Policy Lookup feature?
Response:

• A.It creates packet flow over FortiGate by sending real-time traffic.
• B.It searches the matching policy based on input criteria.
• C.It creates a new firewall policy based on input criteria.
• D.It finds duplicate objects in firewall policies.

If antivirus, grayware, and heuristic scans are enabled on FortiGate, in which order does FortiGate apply the scanning?
Response:

• A.grayware -> antivirus -> heuristics
• B.antivirus -> grayware -> heuristics
• C.heuristics -> grayware -> antivirus
• D.antivirus -> heuristics -> grayware

Which statements are true of public key infrastracture (PKI) users on FortiGate?
(Choose two.)
Response:

• A.PKI users can belong to firewall user groups.
• B.PKI users must authenticate with both a certificate and a password.
• C.FortiGate must include the CA certificate that issued the PKI peer user certificate.
• D.The first PKI user must be added to FortiGate through the GUI.

What is Diffie Hellman?
Response:

• A.An algorithm for generating a public and private key
• B.An algorithm and agreement method for two peers to independently calculate a common private key after sharing only their public keys
• C.An agreement method for authenticating two peers using a pre-shared key
• D.An agreement method for negotiating an IKE security association (SA)