Free Fortinet NSE4_FGT_AD-7.6 Exam Questions

Question 1

You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.You cannot access any of the Google applications, but you are able to access www.fortinet.com . What would you do to resolve this issue?

A : Change the Inspection mode to Proxy-based.

B : Set SSL inspection to deep-content-inspection.

C : Move up Google in the Application and Filter Overrides section to set its priority to 1.

D : Move up Google in the Application and Filter Overrides section to set its priority to 1.

Answer: C

Question 2

What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device? (Choose two.)

A : Heartbeat IP addresses are used to distinguish between cluster members.

B : The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.

C : A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.

D : Heartbeat interfaces have virtual IP addresses that are manually assigned.

Answer: A,C

Question 3

You have configured an application control profile, set peer-to-peer traffic to Block under the Categories tab. and applied it to the firewall policy. However, your peer-to-peer traffic on known ports is passing through the FortiGate without being blocked. What FortiGate settings should you check to resolve this issue?

A : FortiGuard category ratings

B : Network Protocol Enforcement

C : Replacement Messages for UDP-based Applications

D : Application and Filter Overrides

Answer: B

Question 4

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)

A : Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.

B : Both interfaces must have the interface role assigned.

C : Both interfaces must have directly connected routes on the routing table.

D : Both interfaces must have IP addresses assigned.

Answer: C,D

Question 5