NSE4_FGT-5.6 試験問題を無料オンラインアクセス

What is the purpose of the Policy Lookup feature?
Response:

• A.It searches the matching policy based on input criteria.
• B.It creates packet flow over FortiGate by sending real-time traffic.
• C.It creates a new firewall policy based on input criteria.
• D.It finds duplicate objects in firewall policies.

You have configured the following log settings on the Log Settings page. Which configurations are now required to generate log messages on traffic coming through your network?
(Choose two.)
Response:

• A.Enable Capture Packets on your firewall policy.
• B.Enable Log Allowed Traffic on your firewall policy.
• C.Enable Historical FortiView on the Log Settings page.
• D.Enable a security profile on your firewall policy.
• E.Enable Local Traffic Log on the Log Settings page.

View the exhibit.

The client cannot connect to the HTTP web server. The administrator run the FortiGate built-in sniffer and got the following output:
What should be done next to troubleshoot the problem?
Response:

• A.Execute a debug flow.
• B.Execute another sniffer in the FortiGate, this time with the filter "host 10.0.1.10".
• C.Capture the traffic using an external sniffer connected to port1.
• D.Run a sniffer in the web server.

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?
Response:

• A.The FortiGate unit's internal IP address
• B.The remote user's public IP address
• C.The remote user's virtual IP address
• D.The FortiGate unit's public IP address

An administrator needs to be able to view logs for application usage on your network. What configurations are required to ensure that FortiGate generates logs for application usage activity?
(Choose two.)
Response:

• A.Enable logging on the firewall policy.
• B.Enable a web filtering profile on the firewall policy.
• C.Enable an application control security profile on the firewall policy.
• D.Create an application control policy.