NSE4_FGT-6.2 무료 덤프문제 온라인 액세스

Which statement about FortiGuard services for FortiGate is true?

• A.FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.
• B.Antivirus signatures are downloaded locally on FortiGate.
• C.The web filtering database is downloaded locally on FortiGate.
• D.FortiGate downloads IPS updates using UDP port 53 or 8888.

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

• A.The CA certificate that signed the web-server certificate must be installed on the browser.
• B.The private key of the CA certificate that signed the browser certificate must be installed on the browser.
• C.The public key of the web server certificate must be installed on the browser.
• D.The web-server certificate must be installed on the browser.

Which of the following statements about converse mode are true? (Choose two.)

• A.Administrators can access the FortiGate only through the console port.
• B.FortiGate stops doing RPF checks over incoming packets.
• C.Administrators cannot change the configuration.
• D.FortiGate stops sending files to FortiSandbox for inspection.

If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

• A.The Services field removes the requirement of creating multiple VIPs for different services.
• B.The Services field does not allow source NAT and destination NAT to be combined in the same policy.
• C.The Services field is used when several VIPs need to be bundled into VIP groups.
• D.The Services field does not allow multiple sources of traffic, to use multiple services, to connect to a single computer.

Which of the following static routes are not maintained in the routing table?

• A.ISDB routes
• B.Policy routes
• C.Named Address routes
• D.Dynamic routes