NSE4_FGT-5.6 무료 덤프문제 온라인 액세스

To create a valid traffic shaping policy, which of the following matching criteria must align between a traffic shaping policy and a firewall policy?
(Choose three.)
Response:

• A.Service
• B.Destination
• C.Incoming interface
• D.Schedule
• E.Source

Which statements about antivirus scanning using flow-based full scan are true?
(Choose two.)
Response:

• A.The antivirus engine starts scanning a file after the last packet arrives.
• B.It does not support FortiSandbox inspection.
• C.It uses the compact antivirus database.
• D.FortiGate can insert the block replacement page during the first connection attempt only if a virus is detected at the start of the TCP stream.

View the exhibit.


Which of the following statements are correct?
(Choose two.)
Response:

• A.Dead peer detection must be disabled to support this type of IPsec setup.
• B.This setup requires at least two firewall policies with action set to IPsec.
• C.This is a redundant IPsec setup.
• D.The TunnelB route is the primary one for searching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

Which statements about IP-based explicit proxy authentication are true?
(Choose two.)
Response:

• A.FortiGate remembers authenticated sessions using browser cookies.
• B.IP-based authentication is best suited to authenticating users behind a NAT device.
• C.Sessions from the same source address are treated as a single user.
• D.IP-based authentication consumes less FortiGate's memory than session-based authentication.

Which of the following statements regarding FortiGate inspection modes are correct?
(Choose three.)
Response:

• A.Security profiles must be manually converted to flow-based before switching the inspection mode from proxy-based to flow-based.
• B.Switching from proxy-based inspection mode to flow-based inspection mode will result in a warning message.
• C.Flow-based is the default FortiGate inspection mode.
• D.Switching from proxy-based to flow-based and then back to proxy-based will not produce original configurations.
• E.Proxy-based inspection mode supports more features.