NSE4_FGT-6.2 무료 덤프문제 온라인 액세스

You have tasked to design a new IPsec deployment with the following criteria:
* All satellite offices must connect to the two HQ sites.
* The satellite offices do not need to communicate directly with other satellite offices.
* Backup VPN is not required.
* The design should minimize the number of tunnels being configured.
Which topology should be used to satisfy all of the requirements?

• A.Redundant
• B.Partial mesh
• C.Hub-and-spoke
• D.Fully meshed

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

• A.This is known as many-to-one NAT.
• B.Port address translation is not used.
• C.Connections are tracked using source port and source MAC address.
• D.Source IP is translated to the outgoing interface IP.

Which statement about a One-to-One IP pool is true?

• A.It allows the fixed mapping of an internal address range to an external address range.
• B.It limits the client to 64 connections per IP pool.
• C.It is used for destination NAT.
• D.It does not use port address translation.

A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups.
What is required in the SSL VPN configuration to meet these requirements?

• A.Two firewall policies with different captive portals.
• B.Different virtual SSL VPN IP addresses for each group.
• C.Different SSL VPN realms for each group.
• D.Two separate SSL VPNs in different interfaces mapping the same ssl.root.

Which one of the following processes is involved in updating IPS from FortiGuard?

• A.Protocol decoder update requests are sent to service.fortiguard.net.
• B.IPS engine updates can only be obtained using push updates.
• C.IPS signature update requests are sent to update.fortiguard.net.
• D.FortiGate IPS update requests are sent using UDP port 443.