Free Fortinet NSE 4 – FortiOS 6.2 Exam NSE4_FGT-6.2 Exam Practice Test

By default, when logging to disk, when does FortiGate delete logs?

• 30 days
• 1 year
• Never
• 7 days

An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark Port Forward. What step is required for this configuration?

• Configure an SSL VPN realm for clients to use the port forward bookmark.
• Configure the client application to forward IP traffic through FortiClient.
• Configure the virtual IP address to be assigned t the SSL VPN users.
• Configure the client application to forward IP traffic to a Java applet proxy.

What settings must you configure to ensure FortiGate generates logs for web filter activity on a firewall policy called Full Access? (Choose two.)

• Enable Event Logging.
• Enable a web filter security profile on the Full Access firewall policy.
• Enable Log Allowed Traffic on the Full Access firewall policy.
• Enable disk logging.

Which is the correct description of a hash result as it relates to digital certificates?

• A unique value used to verify the input data
• An output value that is used to identify the person or deduce that authored the input data.
• An obfuscation used to mask the input data.
• An encrypted output value used to safe-guard the input data

Which statements correctly describe transparent mode operation? (Choose three.)

• All interfaces of the transparent mode FortiGate device must be on different IP subnets.
• Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.
• The transparent FortiGate is visible to network hosts in an IP traceroute.
• It permits inline traffic inspection and firewalling without changing the IP scheme of the network.
• FortiGate acts as transparent bridge and forwards traffic at Layer 2.

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

• It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
• ADVPN is only supported with IKEv2.
• Tunnels are negotiated dynamically between spokes.
• Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

A FortiGate device has multiple VDOMs. Which statement about an administrator account configured with the default prof_admin profile is true?

• It can create administrator accounts with access to the same VDOM.
• It cannot have access to more than one VDOM.
• It can reset the password for the admin account.
• It can upgrade the firmware on the FortiGate device.

What FortiGate components are tested during the hardware test? (Choose three.)

• Administrative access
• HA heartbeat
• CPU
• Hard disk
• Network interfaces

How does FortiGate verify the login credentials of a remote LDAP user?

• FortiGate regenerates the algorithm based on the login credentials and compares it to the algorithm stored on the LDAP server.
• FortiGate sends the user-entered credentials to the LDAP server for authentication.
• FortiGate queries the LDAP server for credentials.
• FortiGate queries its own database for credentials. You can configure Fortigate to point to an LDAP server for server-based password authentication throught the LDAP Server (Security Study Guide, 187)

The FSSO Collector Agent set to advanced access mode for the Windows Active Directory uses which of the following?

• LDAP convention
• NTLM convention
• Windows convention -- NetBios\Username
• RSSO convention