Free NSE4_FGT-5.6 Exam Braindumps (page: 6)

Page 5 of 47

View the exhibit.



When Role is set to Undefined, which statement is true?

  1. The GUI provides all the configuration options available for the port1 interface.
  2. You cannot configure a static IP address for the port1 interface because it allows only DHCP addressing mode.
  3. Firewall policies can be created from only the port1 interface to any interface.
  4. The port1 interface is reserved for management only.

Answer(s): A



In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

  1. Client > primary FortiGate> secondary FortiGate> primary FortiGate> web server.
  2. Client > secondary FortiGate> web server.
  3. Client >secondary FortiGate> primary FortiGate> web server.
  4. Client> primary FortiGate> secondary FortiGate> web server.

Answer(s): D



View the exhibit.



A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting.Games).

Based on this configuration, which statement is true?

  1. Addicting.Games is allowed based on the Application Overrides configuration.
  2. Addicting.Games is blocked based on the Filter Overrides configuration.
  3. Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.
  4. Addicting.Games is allowed based on the Categories configuration.

Answer(s): A



What happens to traffic that is routed through an IPsec tunnel, but does not match any of the phase 2 quick mode selectors?

  1. It crosses the tunnel, but is not inspected
  2. It is dropped
  3. It crosses the tunnel, but is not encrypted
  4. It is routed using the next route in the routing table

Answer(s): B






Post your Comments and Discuss Fortinet NSE4_FGT-5.6 exam with other Community members:

NSE4_FGT-5.6 Discussions & Posts