Free NSE4_FGT-5.6 Exam Braindumps (page: 5)

Page 4 of 47

Which statements are true regarding firewall policy NAT using the Outgoing Interface Address with Fixed Port disabled?
(Choose two.)

  1. Source IP is translated to outgoing interface IP
  2. Port address translation is not used
  3. This is known as many-to-one NAT.
  4. Connections are tracked using source port and source MAC address.

Answer(s): A,C



Which statements are true regarding blocking botnet command and control traffic? (Choose two.)

  1. DNS lookups are checked against the Botnet Command and Control database.
  2. The botnet command and control domains can be enabled on the web filter profile
  3. This service requires a FortiGuard web filtering license.
  4. The Botnet Command and Control database cannot be downloaded -it's only available on FortiGuard servers.

Answer(s): A,C



What methods can be used to deliver the token code to a user who is configured to use two-factor authentication?
(Choose three.)

  1. SMS text message
  2. Instant message app
  3. Voicemail message
  4. Email
  5. FortiToken

Answer(s): A,D,E



Which of the following are valid actions for FortiGuard web category filtering? (Choose three.)

  1. Allow
  2. Block
  3. Exempt
  4. Warning
  5. Shape

Answer(s): A,B,C






Post your Comments and Discuss Fortinet NSE4_FGT-5.6 exam with other Community members:

NSE4_FGT-5.6 Discussions & Posts