Free NSE4_FGT-5.6 Exam braindumps download (NSE4_FGT-5.6 exam dumps Free)

QUESTION: 41

Examine the exhibit, which contains a screenshot of an explicit web proxy configuration.
What does FortiGate do when the setting Default Firewall Policy Action is set to Deny?

Denies web proxy access to guest users
Blocks any web proxy traffic that matches an explicit proxy policy without an action
Blocks any web proxy traffic that does not match any explicit proxy policy
Blocks any web proxy traffic that matches a firewall policy without a proxy profile

Answer(s): C

Show Answer Next Question

QUESTION: 42

View the exhibit.
Which statement is true regarding Restrict Access in the SSL-VPN Settings?

SSL VPN users will have access to only the REMOTE_ETH 1 subnet.
Only users within the REMOTE_ETH1 subnet range will have access to the SSL VPN web portal login page.
FortiGate will assign an IP address to the SSL VPN network adaptor from the REMOTE_ETH1 subnet.
It enables client integrity check for the SSL VPN users in the REMOTE_ETH1 subnet.

Answer(s): B

Show Answer Next Question

QUESTION: 43

Which statements about application control are true?
(Choose two.)

Enabling application control profile in a security profile enables application control for all the traffic flowing through the FortiGate.
It cannot take an action on unknown applications.
It can inspect encrypted traffic.
It can identify traffic from known applications, even when they are using non-standard TCP/UDP
ports.

Answer(s): C,D

Show Answer Next Question

QUESTION: 44

Under which circumstance is the IPsec ESP traffic encapsulated over UDP? Response:

When using IKE version 2 (IKEv2).
When NAT-T detects there is a device between both IPsec peers doing NAT over the IPsec traffic.
When the IPsec VPN is configured as dial up.
When the phase 1 is configured to use aggressive mode.

Answer(s): B

Show Answer Next Question