NSE4_FGT-6.4 試験問題を無料オンラインアクセス

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

• A.To generate logs
• B.To allow for out-of-order packets that could arrive after the FIN/ACK packets.
• C.To remove the NAT operation.
• D.To finish any inspection operations.

Which of statement is true about SSL VPN web mode?

• A.The tunnel is up while the client is connected.
• B.The external network application sends data through the VPN.
• C.It supports a limited number of protocols.
• D.It assigns a virtual IP address to the client.

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

• A.On HQ-FortiGate, enable Diffie-Hellman Group 2.
• B.On HQ-FortiGate, set Encryption to AES256.
• C.On HQ-FortiGate, enable Auto-negotiate.
• D.On Remote-FortiGate, set Seconds to 43200.

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

• A.remote user's public IP address
• B.The remote user's virtual IP address.
• C.The internal IP address of the FortiGate device.
• D.The public IP address of the FortiGate device.

In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)

• A.The policy table in the GUI will be consolidated to display policies with IPv4 and IPv6 sources and destinations.
• B.The Incoming Interface. Outgoing Interface. Schedule, and Service fields can be shared with both IPv4 and IPv6.
• C.The IP version of the sources and destinations in a firewall policy must be different.
• D.The policy table in the GUI can be filtered to display policies with IPv4, IPv6 or IPv4 and IPv6 sources and destinations.
• E.The IP version of the sources and destinations in a policy must match.