NSE4_FGT-5.6 試験問題を無料オンラインアクセス

Examine the CLI configuration. What does this configuration do?
(Choose two.)
config system setting
set ses-denied-traffic enable
end
Response:

• A.It creates a session for traffic being denied.
• B.It reduces the amount of logs generated by denied traffic.
• C.It reduces the amount of logs generated by denied traffic.
• D.It sends an alert notification to the administrator upon detecting denied traffic.

What is the purpose of the Policy Lookup feature?
Response:

• A.It creates a new firewall policy based on an input criteria.
• B.It finds duplicate objects in firewall policies.
• C.It enables hidden security profiles with full logging capabilities and generates Learning Reports based on an input criteria.
• D.It searches the matching policy based on an input criteria.

Which of the following IPsec parameters is a phase 2 configuration setting?
Response:

• A.eXtended Authentication (XAuth)
• B.Peer ID
• C.Quick mode selectors
• D.Authentication method

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?
Response:

• A.The FortiGate unit's public IP address
• B.The remote user's virtual IP address
• C.The remote user's public IP address
• D.The FortiGate unit's internal IP address

Which of the following are IP pool types supported by FortiGate?
(Choose three.)
Response:

• A.Port block allocation
• B.One-to-One
• C.Overload
• D.Transparent
• E.Outgoing interface