Online Access Free NSE4_FGT-6.2 Exam Questions

Which of the following features is supported by web filter in flow-based inspection mode with NGFW mode set to profile-based? (Choose two.)

• A.Rating option
• B.Search engines
• C.Static URL
• D.FortiGuard Quotas

Which statements about DNS filter profiles are true? (Choose two.)

• A.They must be applied in firewall policies with SSL inspection enabled.
• B.They can block DNS requests to known botnet command and control servers.
• C.They can inspect HTTP traffic.
• D.They can redirect blocked requests to a specific portal.

An administrator has configured a dialup IPsec VPN with XAuth. Which statement best describes what occurs during this scenario?

• A.Phase 1 negotiations will skip preshared key exchange.
• B.Only digital certificates will be accepted as an authentication method in phase 1.C
• C.Dialup clients must provide a username and password for authentication.
• D.Dialup clients must provide their local ID during phase 2 negotiations.

Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.


An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

• A.A DoS policy should be used, instead of an IPS sensor.
• B.The HTTPS signatures have not been added to the sensor.
• C.A DoS policy should be used, instead of an IPS sensor.
• D.The firewall policy is not using a full SSL inspection profile.
• E.The IPS filter is missing the Protocol: HTTPS option.

How does FortiGate select the central SNAT policy that is applied to a TCP session?

• A.It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.
• B.It selects the SNAT policy specified in the configuration of the outgoing interface.
• C.It selects the central SNAT policy with the lowest priority.
• D.It selects the first matching central SNAT policy, reviewing from top to bottom.