How does FortiGate select the central SNAT policy that is applied to a TCP session? Response:

It selects the SNAT policy specified in the configuration of the outgoing interface.
It selects the first matching central-SNAT policy from top to bottom.
It selects the central-SNAT policy with the lowest priority.
It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.

Answer(s): B

Which of the following settings and protocols can be used to provide secure and restrictive administrative access to FortiGate?
(Choose three.)

Answer(s): A,B,D

A FortiGate interface is configured with the following commands:

What statements about the configuration are correct?
(Choose two.)

Answer(s): A,C

Which statements correctly describe transparent mode operation? (Choose three.)

All interfaces of the transparent mode FortiGate device must be on different IP subnets.
The transparent FortiGate is visible to network hosts in an IP traceroute.
It permits inline traffic inspection and firewalling without changing the IP scheme of the network.
Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.
The FortiGate acts as transparent bridge and forwards traffic at Layer-2.

Answer(s): C,D,E

Free NSE4_FGT-5.6 Exam Braindumps (page: 24)