Online Access Free NSE4_FGT-6.4 Exam Questions

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

• A.Subject Alternative Name value
• B.Subject Key Identifier value
• C.Subject value
• D.SMMIE Capabilities value

An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

• A.Disable the RPF check at the FortiGate interface level for the source check.
• B.Enable asymmetric routing, so the RPF check will be bypassed.
• C.Disable the RPF check at the FortiGate interface level for the reply check.
• D.Enable asymmetric routing at the interface level.

Which scanning technique on FortiGate can be enabled only on the CLI?

• A.Antivirus scan
• B.Ransomware scan
• C.Trojan scan
• D.Heuristics scan

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

• A.NGFW policy-based mode does not require the use of central source NAT policy
• B.NGFW policy-based mode policies support only flow inspection
• C.NGFW policy-based mode can only be applied globally and not on individual VDOMs
• D.NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy

Which of the following SD-WAN load -balancing method use interface weight value to distribute traffic? (Choose two.)

• A.Source IP
• B.Spillover
• C.Session
• D.Volume