Online Access Free NSE4_FGT-6.0 Exam Questions

A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to support this request?

• A.Implement web filter quotas for the specified website.
• B.Implement DNS filter for the specified website.
• C.Implement web filter authentication for the specified website
• D.Implement a web filter category override for the specified website.

Which one of the following processes is involved in updating IPS from FortiGuard?

• A.IPS signature update requests are sent to update.fortiguard.net.
• B.IPS engine updates can only be obtained using push updates.
• C.Protocol decoder update requests are sent to service.fortiguard.net.
• D.FortiGate IPS update requests are sent using UDP port 443.

View the exhibit.

Which of the following statements are correct? (Choose two.)

• A.The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
• B.Dead peer detection must be disabled to support this type of IPsec setup.
• C.This setup requires at least two firewall policies with the action set to IPsec.
• D.This is a redundant IPsec setup.

Which of the following statements are true when using WPAD with the DHCP discovery method? (Choose two.)

• A.If the DHCP method fails, browsers will try the DNS method.
• B.The DHCP server provides the PAC file for download.
• C.The browser needs to be preconfigured with the DHCP server's IP address.
• D.The browser sends a DHCPONFORM request to the DHCP server.

Which is a requirement for creating an inter-VDOM link between two VDOMs?

• A.Both VDOMs must operate in NAT mode.
• B.The inspection mode of both VDOMs must match.
• C.At least one of the VDOMs must operate in NAT mode.
• D.The inspection mode of at least one VDOM must be proxy-based.