QUESTION: 81

Which of the following configuration settings are global settings? (Choose two.)

FortiGuard settings
HA settings
Firewall policies
Security profiles

Answer(s): A,B

An administrator wants to monitor their network for any probing attempts aimed to exploit existing vulnerabilities in their servers.
What must they configure on their FortiGate to accomplish this? (Choose two.)

An application control profile and set all application signatures to monitor.
A DoS policy, and log all UDP and TCP scan attempts.
An IPS sensor to monitor all signatures applicable to the server.
A web application firewall profile to check protocol constraints.

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 83

Why must you use aggressive mode when a local FortiGate IPsec gateway hosts multiple dialup tunnels?

The FortiGate is able to handle NATed connections only with aggressive mode.
FortiClient supports aggressive mode.
The remote peers are able to provide their peer IDs in the first message with aggressive mode.
Main mode does not support XAuth for user authentication.

Answer(s): C

Reveal Solution Next Question

QUESTION: 84

Which statements about the firmware upgrade process on an active-active high availability (HA) cluster are true?
(Choose two.)

The firmware must be manually uploaded to each FortiGate.
Only secondary FortiGate devices are rebooted.
Uninterruptable upgrade is enabled by default.
Traffic load balancing is temporally disabled while upgrading the firmware.

Answer(s): B,D

Reveal Solution Next Question

Free NSE4_FGT-5.6 Exam Braindumps (page: 21)

QUESTION: 81

QUESTION: 82

QUESTION: 83

QUESTION: 84