Free Fortinet NSE4_FGT_AD-7.6 Exam Questions

Question 1

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)

A : Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.

B : Both interfaces must have the interface role assigned.

C : Both interfaces must have directly connected routes on the routing table.

D : Both interfaces must have IP addresses assigned.

Answer: C,D

Question 2

Refer to the exhibits.An administrator has observed the performance status outputs on an HA cluster for 55 seconds. Which FortiGate is the primary?

A : HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting

B : HQ-NGFW-2 with the parameter priority setting

C : HQ-NGFW-1 with the parameter override setting

D : HQ-NGFW-2 with the parameter memory-failover-threshold setting

Answer: D

Question 3

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors. What is the reason for the certificate warning errors?

A : The option invalid SSL certificates is set to allow on the SSL/SSH inspection profile.

B : The matching firewall policy is set to proxy inspection mode.

C : The browser does not trust the certificate used by FortiGate for SSL inspection.

D : The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.

Answer: C

Question 4

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)

A : Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.

B : Both interfaces must have the interface role assigned.

C : Both interfaces must have directly connected routes on the routing table.

D : Both interfaces must have IP addresses assigned.

Answer: C,D

Question 5

Which two components are part of the secure internet access (SIA) agent-based mode on FortiSASE? (Choose two.)

A : FortiSASE Firewall-as-a-Service (FWaaS)

B : The proxy auto-configuration (PAC) file

C : VPN policies

D : FortiExtender

Answer: A,C