Online Access Free NSE4_FGT_AD-7.6 Exam Questions

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.

The WAN (port2) interface has the IP address 100.65.0.101/24. The LAN (port4) interface has the IP address 10.0.11.254/24. Which IP address will be used to source NAT (SNAT) the traffic, if the user on HQ-PC-1 (10.0.11.50) pings the IP address of BR-FGT (100.65.1.111)

• A.100.65.0.149
• B.100.65.0.101
• C.100.65.0.49
• D.100.65.0.99

What are two features of the NGFW profile-based mode? (Choose two.)

• A.NGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.
• B.NGFW profile-based mode must require the use of central source NAT policy.
• C.NGFW profile-based mode policies support both flow inspection and proxy inspection.
• D.NGFW profile-based mode can only be applied globally and not on individual VDOMs.

Refer to the exhibit.

FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles.
Which action must the administrator perform to consolidate the two policies into one?

• A.Create an Interface Group that includes port1 and port2 to create a single firewall policy.
• B.Replace port1 and port2 with the any interface in a single firewall policy.
• C.Enable Multiple Interface Policies to select port1 and port2 in the same firewall policy.
• D.Select port1 and port2 subnets in a single firewall policy.

Refer to the exhibit. Why is the Antivirus scan switch grayed out when you are creating a new antivirus profile for FTP?

• A.Antivirus scan is disabled under System -> Feature visibility.
• B.The Feature Set for the profile is Flow-based but it must be Proxy-based.
• C.None of the inspected protocols are active in this profile.
• D.FortiGate, with less than 2 GB RAM, does not support the Antivirus scan feature.

Refer to the exhibit showing a debug flow output.

Which two conclusions can you make from the debug flow output? (Choose two.)

• A.The RPF check fails.
• B.The default gateway is configured on port2.
• C.The matching firewall policy denies the traffic.
• D.The debug flow is for UDP traffic.