Online Access Free Fortinet.NSE4_FGT_AD-7.6.v2026-05-23.q69 Practice Test (Page 9)

NSE4_FGT_AD-7.6 Exam Question 36

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

A.Extended authentication (XAuth) for faster authentication because fewer packets are exchanged

B.Pre-shared key and certificate signature as authentication methods

C.No certificate is required on the remote peer when you set the certificate signature as the authentication method

D.Extended authentication (XAuth) to request the remote peer to provide a username and password

NSE4_FGT_AD-7.6 Exam Question 37

Which two settings are required for SSL VPN to function between two FortiGate devices?
(Choose two.)

A.The server FortiGate requires a CA certificate to verify the client FortiGate certificate.

B.The client FortiGate requires a manually added route to remote subnets.

C.The client FortiGate requires a client certificate signed by the CA on the server FortiGate.

D.The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.

NSE4_FGT_AD-7.6 Exam Question 38

Refer to the exhibits. An administrator wants to add HQ-ISFW-2 in the Security Fabric. HQ-ISFW-
2 is in the same subnet as HQ-ISFW. After configuring the Security Fabric settings on HQ-ISFW-
2, the status stays Pending.

What can be the two possible reasons? (Choose two.)

A.Upstream FortiGate IP must be set to 10.0.11.254.

B.SAML Single Sign-On must be set to Manual.

C.HQ-ISFW-2 must be authorized on HQ-ISFW.

D.Management IP must be set to 10.0.13.254.

NSE4_FGT_AD-7.6 Exam Question 39

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration.

An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2.
The policy should work such that Remote-User1 must be able to access the Webserver while preventing Remote-User2 from accessing the Webserver.
Which additional configuration can the administrator add to a deny firewall policy, beyond the default behavior, to block Remote-User2 from accessing the Webserver?

A.Disable match-vip in the Allow_access policy

B.Configure a One-to-One IP Pool object in a new policy.

C.Set the Destination address as Webserver in the Deny policy.

D.Set the Destination address as Deny_IP in the Allow_access policy.

NSE4_FGT_AD-7.6 Exam Question 40

Refer to the exhibits. The exhibits show the application sensor configuration and the Excessive- Bandwidth and Apple filter details.
Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?