NSE4_FGT-6.0 試験問題を無料オンラインアクセス

Examine the routing database shown in the exhibit, and then answer the following question:

Which of the following statements are correct? (Choose two.)

• A.The port3 default route has the highest distance.
• B.The port1 and port2 default routes are active in the routing table.
• C.The port3 default route has the lowest metric.
• D.There will be eight routes active in the routing table.

An administrator is attempting to allow access to https://fortinet.com through a firewall policy that is configured with a web filter and an SSL inspection profile configured for deep inspection. Which of the following are possible actions to eliminate the certificate error generated by deep inspection? (Choose two.)

• A.Configure fortinet.com access to bypass the IPS engine.
• B.Implement firewall authentication for all users that need access to fortinet.com.
• C.Configure an SSL-inspection exemption for fortinet.com.
• D.Manually install the FortiGate deep inspection certificate as a trusted CA.

A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups.
What is required in the SSL VPN configuration to meet these requirements?

• A.Two firewall policies with different captive portals.
• B.Different virtual SSL VPN IP addresses for each group.
• C.Two separate SSL VPNs in different interfaces mapping the same ssl.root.
• D.Different SSL VPN realms for each group.

On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)

• A.hourly
• B.store-and-upload
• C.on-demand
• D.real time

Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

• A.SMTP.Login.Brute.Force
• B.IMAP.Login.brute.Force
• C.Location: server Protocol: SMTP
• D.ip_src_session