NSE4_FGT-5.6 무료 덤프문제 온라인 액세스

Examine this FortiGate configuration:
config system global
set av-failopen pass
set fail-open disable
end
Examine the output of the following debug command:
# diagnose hardware sysinfo conserve
memory conserve mode: on
total RAM: 3040 MB
memory used: 2706 MB 89% of total RAM
memory used threshold extreme: 2887 MB 95% of total RAM
memory used threshold red: 2675 MB 88% of total RAM
memory used threshold green: 2492 MB 82% of total RAM
Based on the diagnostics outputs above, how is the FortiGate handling packets that require IPS inspection?
Response:

• A.They are allowed and inspected as long as no additional proxy-based inspection is required.
• B.They are allowed and inspected.
• C.They are dropped.
• D.They are allowed, but with no inspection.

Which statements about an IPv6-over-IPv4 IPsec configuration are correct?
(Choose two.)
Response:

• A.The destination quick mode selector must be an IPv6 address.
• B.The source quick mode selector must be an IPv4 address.
• C.The local gateway IP must an IPv4 address.
• D.The remote gateway IP must be an IPv6 address.

Which component of FortiOS performs application control inspection?
Response:

• A.Antivirus engine
• B.Application control engine
• C.Kernel
• D.IPS engine

Which traffic inspection features can be executed by a security processor (SP)?
(Choose three.)
Response:

• A.SIP session helper
• B.TCP SYN proxy
• C.Proxy-based antivirus
• D.Flow-based web filtering
• E.Attack signature matching

What is the purpose of the Policy Lookup feature?
Response:

• A.It creates packet flow over FortiGate by sending real-time traffic.
• B.It creates a new firewall policy based on input criteria.
• C.It searches the matching policy based on input criteria.
• D.It finds duplicate objects in firewall policies.