NSE4_FGT-5.6 試験問題を無料オンラインアクセス

Examine the exhibit, which shows a FortiGate device with two VDOMs: VDOM1 and VDOM2. Both VDOMs are operating in NAT/route mode. The subnet 10.0.1.0/24 is connected to VDOM1.
The subnet 10.0.2.0/24 is connected to VDOM2. There is an inter-VDOM link between VDOM1 and VDOM2.

What is required in the FortiGate configuration to route traffic between both subnets through an inter-VDOM link?
Response:

• A.A firewall policy in VDOM1 to allow the traffic from 10.0.1.0/24 to 10.0.2.0/24 with port1 as the source interface and port2 as the destination interface.
• B.A static route in VDOM2 for the destination subnet 10.0.1.0/24.
• C.A static route in VDOM1 for the destination subnet of 10.0.1.0/24.
• D.A static route in VDOM2 with the destination subnet matching the subnet assigned to the inter-VDOM link.

What is Diffie Hellman?
Response:

• A.An algorithm and agreement method for two peers to independently calculate a common private key after sharing only their public keys
• B.An algorithm for generating a public and private key
• C.An agreement method for negotiating an IKE security association (SA)
• D.An agreement method for authenticating two peers using a pre-shared key

Which of the following statements regarding FortiGate inspection modes are correct?
(Choose three.)
Response:

• A.Proxy-based inspection mode supports more features.
• B.Switching from proxy-based inspection mode to flow-based inspection mode will result in a warning message.
• C.Switching from proxy-based to flow-based and then back to proxy-based will not produce original configurations.
• D.Flow-based is the default FortiGate inspection mode.
• E.Security profiles must be manually converted to flow-based before switching the inspection mode from proxy-based to flow-based.

You've enabled disk logging and configured the firewall policy as illustrated in the exhibit.


What is FortiGate's logging behavior with this configuration?
(Choose two.)
Response:

• A.Security log events appear in the forward traffic log and security log
• B.A forward traffic log generates for packets causing a security event.
• C.A forward traffic log generates for every single session.
• D.No forward traffic or security logs will appear.

A FortiGate interface is configured with the following commands:

What statements about the configuration are correct?
(Choose two.)
Response:

• A.IPv6 clients connected to port1 can use SLAAC to generate their IPv6 addresses.
• B.FortiGate can provide IPv6 addresses to DHCPv6 client.
• C.FortiGate can provide DNS settings to IPv6 clients.
• D.FortiGate can send IPv6 router advertisements (RAs.)