Online Access Free NSE4_FGT-6.0 Exam Questions

Which of the following statements about the FSSO collector agent timers is true?

• A.The IP address change verify interval monitors the server IP address where the collector agent is installed, and the updates the collector agent configuration if it changes.
• B.The workstation verify interval is used to periodically check of a workstation is still a domain member.
• C.The dead entry timeout interval is used to age out entries with an unverified status.
• D.The user group cache expiry is used to age out the monitored groups.

View the exhibit.

A
user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

• A.Addcting.Games is allowed based on the Categories configuration.
• B.Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.
• C.Addicting.Games is allowed based on the Application Overrides configuration.
• D.Addicting.Games is blocked on the Filter Overrides configuration.

How does FortiGate verify the login credentials of a remote LDAP user?

• A.FortiGate queries its own database for credentials.
• B.FortiGate sends the user-entered credentials to the LDAP server for authentication.
• C.FortiGate regenerates the algorithm based on the login credentials and compares it to the algorithm stored on the LDAP server.
• D.FortiGate queries the LDAP server for credentials.

An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark Port Forward. What step is required for this configuration?

• A.Configure the client application to forward IP traffic through FortiClient.
• B.Configure the virtual IP address to be assigned t the SSL VPN users.
• C.Configure an SSL VPN realm for clients to use the port forward bookmark.
• D.Configure the client application to forward IP traffic to a Java applet proxy.

What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

• A.It limits the scope of application control to the browser-based technology category only.
• B.It limits the scope of application control to scan application traffic on DNS protocol only.
• C.It limits the scope of application control to scan application traffic using parent signatures only
• D.It limits the scope of application control to scan application traffic based on application category only.