Free NSE4_FGT-5.6 Exam Braindumps
Fortinet NSE 4 - FortiOS 5.6 Questions 81–85 (page: 18)

Updated On: 10-Feb-2026

Which of the following configuration settings are global settings? (Choose two.)

  1. FortiGuard settings
  2. HA settings
  3. Firewall policies
  4. Security profiles

Answer(s): A,B



An administrator wants to monitor their network for any probing attempts aimed to exploit existing vulnerabilities in their servers.
What must they configure on their FortiGate to accomplish this? (Choose two.)

  1. An application control profile and set all application signatures to monitor.
  2. A DoS policy, and log all UDP and TCP scan attempts.
  3. An IPS sensor to monitor all signatures applicable to the server.
  4. A web application firewall profile to check protocol constraints.

Answer(s): B,C



Why must you use aggressive mode when a local FortiGate IPsec gateway hosts multiple dialup tunnels?

  1. The FortiGate is able to handle NATed connections only with aggressive mode.
  2. FortiClient supports aggressive mode.
  3. The remote peers are able to provide their peer IDs in the first message with aggressive mode.
  4. Main mode does not support XAuth for user authentication.

Answer(s): C



Which statements about the firmware upgrade process on an active-active high availability (HA) cluster are true?
(Choose two.)

  1. The firmware must be manually uploaded to each FortiGate.
  2. Only secondary FortiGate devices are rebooted.
  3. Uninterruptable upgrade is enabled by default.
  4. Traffic load balancing is temporally disabled while upgrading the firmware.

Answer(s): B,D



Examine this output from the diagnose sys top command:



Which statements about the output are true?

(Choose two.)

  1. sshd is the process consuming most memory
  2. sshd is the process consuming most CPU
  3. All the processes listed are in sleeping state
  4. The sshd process is using 123 pages of memory

Answer(s): B,C



Viewing page 18 of 38
Viewing questions 86 - 90 out of 185 questions


Post your Comments and Discuss Fortinet NSE4_FGT-5.6 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!