NSE4_FGT-6.4 무료 덤프문제 온라인 액세스

Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.


An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

• A.A DoS policy should be used, instead of an IPS sensor.
• B.The HTTPS signatures have not been added to the sensor.
• C.The firewall policy is not using a full SSL inspection profile.
• D.A DoS policy should be used, instead of an IPS sensor.
• E.The IPS filter is missing the Protocol: HTTPS option.

To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

• A.Downstream FortiGate
• B.FortiManager
• C.Root FortiGate
• D.FortiAnalyzer

Which two statements are correct about SLA targets? (Choose two.)

• A.SLA targets are optional.
• B.You can configure only two SLA targets per one Performance SLA.
• C.SLA targets are used only when referenced by an SD-WAN rule.
• D.SLA targets are required for SD-WAN rules with a Best Quality strategy.

Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

• A.FG-traffic VDOM
• B.Global VDOM
• C.Customer VDOM
• D.Root VDOM

Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

• A.DNS filter
• B.Web application firewall
• C.Antivirus in flow-based inspection
• D.Application control
• E.Web filter in flow-based inspection