QUESTION: 5

How can you configure the explicit web proxy to block HTTP packets that request a specific HTTP method?

Create an explicit proxy address that matches the HTTP method and apply it to an explicit proxy policy with the action Deny.
Apply a web filter profile to an explicit proxy policy that blocks the HTTP method.
Create a firewall service that matches the HTTP method and apply it to an explicit proxy policy with the action Deny.
Create a DNS filter that matches the HTTP method and apply it to an explicit proxy policy with the action Deny.

Answer(s): A

QUESTION: 6

Firewall policies dictate whether a user or device can (or cannot) authenticate to a network.
Which statements are true regarding firewall authentication? (Choose two.)

In order to authenticate a specific user, the firewall policy must include .., both the IP address and the user as the source.
Firewall policies can be configured to authenticate certificate users.
Users are forced to actively authenticate when the following protocols are disabled in the firewall policy: HTTP, HTTPS, FTP, Telnet.
The order of the firewall policies always determine whether a user's credentials are determined actively or passively.

Answer(s): A,B

Reveal Solution Next Question

QUESTION: 7

View the exhibit. You are trying to go to http://www.clailymotion.com (Dailymotion) from the computer behind the FortiGate.
Which statement is correct regarding this application control profile?

Dailymotion will be blocked, as the Video/Audio category is blocked.
Dailymotion will be allowed, based on application overrides.
Dailymotion will be blocked, based on filter overrides.
Dailymotion will be allowed only if the action for Dailymotion is set to authenticate in application overrides.

Answer(s): B

Reveal Solution Next Question

QUESTION: 8

What statement describes what DNS64 does?

Converts DNS A record lookups to AAAA record lookups.
Translates the destination IPv6 address of the DNS traffic to an IPv4 address.
Synthesizes DNS AAAA records from A records.
Translates the destination IPv4 address of the DNS traffic to an IPv6 address.

Answer(s): B

Reveal Solution Next Question

Free NSE4_FGT-5.6 Exam Braindumps (page: 2)

QUESTION: 5

QUESTION: 6

QUESTION: 7

QUESTION: 8