NSE4_FGT-6.4 試験問題を無料オンラインアクセス

Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

• A.ip_src_session
• B.Location: server Protocol: SMTP
• C.IMAP.Login.brute.Force
• D.SMTP.Login.Brute.Force

Refer to the exhibits.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

• A.Force access to Facebook using the HTTP service.
• B.Additional application signatures are required to add to the security policy.
• C.The SSL inspection needs to be a deep content inspection.
• D.Add Facebook in the URL category in the security policy.

Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?

• A.Change password
• B.Change Administrator profile
• C.Enable two-factor authentication
• D.Enable restrict access to trusted hosts

Which statement about the policy ID number of a firewall policy is true?

• A.It is required to modify a firewall policy using the CLI.
• B.It represents the number of objects used in the firewall policy.
• C.It changes when firewall policies are reordered.
• D.It defines the order in which rules are processed.

Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?

• A.The session is in TCP ESTABLISHED state.
• B.The session is a bidirectional UDP connection.
• C.The session is a UDP unidirectional state.
• D.The session is a bidirectional TCP connection.