QUESTION: 65

Which of the following statements about the FSSO collector agent timers is true?

The workstation verify interval is used to periodically check of a workstation is still a domain member.
The IP address change verify interval monitors the server IP address where the collector agent is installed, and the updates the collector agent configuration if it changes.
The user group cache expiry is used to age out the monitored groups.
The dead entry timeout interval is used to age out entries with an unverified status.

Answer(s): D

QUESTION: 66

A FortiGate device has multiple VDOMs.
Which statement about an administrator account configured with the default prof_admin profile is true?

It can create administrator accounts with access to the same VDOM.
It cannot have access to more than one VDOM.
It can reset the password for the admin account.
It can upgrade the firmware on the FortiGate device.

Answer(s): A

Reveal Solution Next Question

QUESTION: 67

Which of the following features is supported by web filter in flow-based inspection mode with NGFW mode set to profile-based?

FortiGuard Quotas
Static URL
Search engines
Rating option

Answer(s): B

Reveal Solution Next Question

Examine the exhibit, which contains a virtual IP and firewall policy configuration.

The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.

The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

10.200.1.10
Any available IP address in the WAN (port1) subnet 10.200.1.0/24
10.200.1.1
10.0.1.254

Answer(s): C

Reveal Solution Next Question

Free NSE4_FGT-6.0 Exam Braindumps (page: 17)

QUESTION: 65

QUESTION: 66

QUESTION: 67

QUESTION: 68