Free Fortinet NSE 4 – FortiOS 6.4 Exam NSE4_FGT-6.4 Exam Practice Test

Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

• SSH
  
• HTTPS
  
• FTM
  
• FortiTelemetry
  

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

• This is known as many-to-one NAT.
  
• Source IP is translated to the outgoing interface IP.
  
• Connections are tracked using source port and source MAC address.
  
• Port address translation is not used.
  

Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

• To allow for out-of-order packets that could arrive after the FIN/ACK packets
  
• To finish any inspection operations
  
• To remove the NAT operation
  
• To generate logs
  

Which feature in the Security Fabric takes one or more actions based on event triggers?

• Fabric Connectors
  
• Automation Stitches
  
• Security Rating
  
• Logical Topology
  

Which three statements are true regarding session-based authentication? (Choose three.)

• HTTP sessions are treated as a single user.
  
• IP sessions from the same source IP address are treated as a single user.
  
• It can differentiate among multiple clients behind the same source IP address.
  
• It requires more resources.
  
• It is not recommended if multiple users are behind the source NAT
  

Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

• Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.
  
• An SA never expires.
  
• A phase 1 SA is bidirectional, while a phase 2 SA is directional.
  
• Phase 2 SA expiration can be time-based, volume-based, or both.
  
• Both the phase 1 SA and phase 2 SA are bidirectional.
  

Which two policies must be configured to allow traffic on a policy-based next-generation firewall (NGFW) FortiGate? (Choose two.)

• Firewall policy
  
• Policy rule
  
• Security policy
  
• SSL inspection and authentication policy
  

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

• hard-timeout
  
• auth-on-demand
  
• soft-timeout
  
• new-session
  
• Idle-timeout
  

Which two statements about antivirus scanning mode are true? (Choose two.)

• In proxy-based inspection mode, files bigger than the buffer size are scanned.
  
• In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
  
• In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.
  
• In flow-based inspection mode, files bigger than the buffer size are scanned.
  

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

• The collector agent uses a Windows API to query DCs for user logins.
  
• NetAPI polling can increase bandwidth usage in large networks.
  
• The collector agent must search security event logs.
  
• The NetSession Enum function is used to track user logouts.