Free NSE4_FGT-5.6 Exam Braindumps (page: 9)

Page 8 of 47

Which statements correctly define Policy ID and policy Sequence number for firewall policies? (Choose two.)

  1. A policy sequence number defines the order in which rules are processed.
  2. A policy ID number is required to modify a firewall policy from the CLI.
  3. A policy ID number changes when policies are re-ordered.
  4. A policy sequence number reflects the number of objects used in the firewall policy.

Answer(s): A,B



An administrator wants to monitor their network for any probing attempts aimed to exploit existing vulnerabilities in their servers.
What must they configure on their FortiGate to accomplish this? (Choose two.)

  1. An application control profile and set all application signatures to monitor.
  2. A DoS policy, and log all UDP and TCP scan attempts.
  3. An IPS sensor to monitor all signatures applicable to the server.
  4. A web application firewall profile to check protocol constraints.

Answer(s): B,C



Examine the routing database.



Which of the following statements are correct?
(Choose two.)

  1. The port3 default route has the lowest metric, making it the best route.
  2. There will be eight routes active in the routing table.
  3. The port3 default has a higher distance than the port1 and port2 default routes.
  4. Both port1 and port2 default routers are active in the routing table.

Answer(s): C,D



What is the purpose of enabling LEARN as the Action on a firewall policy? Response:

  1. It monitors a specific firewall policy and a report provides recommendations for that firewall policy
  2. It creates learning logs on a global level
  3. It compiles security feature activity from various security-related logs, such as virus and attack logs
  4. It captures data across all traffic and security vectors and generates learning logs and a report with recommendations

Answer(s): D






Post your Comments and Discuss Fortinet NSE4_FGT-5.6 exam with other Community members:

NSE4_FGT-5.6 Discussions & Posts