NSE4_FGT-6.0 試験問題を無料オンラインアクセス

Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

• A.Lookup is done on every packet, regardless of direction
• B.Lookup is done on the last packet sent from the responder
• C.Lookup is done on the trust reply packet from the responder
• D.Lookup is done on the trust packet from the session originator

An administrator wants to create a policy-based IPsec VPN tunnel betweeb two FortiGate devices. Which configuration steps must be performed on both devices to support this scenario? (Choose three.)

• A.Define the phase 1 parameters, without enabling IPsec interface mode
• B.Define at least one firewall policy, with the action set to IPsec.
• C.Define the phase 2 parameters.
• D.Set the phase 2 encapsulation method to transport mode
• E.Define a route to the remote network over the IPsec tunnel.

Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

• A.10.4.200.0/30 is directly connected, port2
• B.172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]
• C.0.0.0.0/0 [20/0] via 10.4.200.2, port2
• D.172.16.32.0/24 is directly connected, port1

Which one of the following processes is involved in updating IPS from FortiGuard?

• A.IPS engine updates can only be obtained using push updates.
• B.IPS signature update requests are sent to update.fortiguard.net.
• C.FortiGate IPS update requests are sent using UDP port 443.
• D.Protocol decoder update requests are sent to service.fortiguard.net.

Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)

• A.They can be configured in both NAT/Route and transparent operation modes.
• B.They support GRE-over-IPsec.
• C.They support L2TP-over-IPsec.
• D.They require two firewall policies: one for each directions of traffic flow.