Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE4_FGT-6.0

Fortinet NSE4_FGT-6.0 Exam
Fortinet NSE 4 - FortiOS 6.0 (Page 4 )

Updated On: 7-Feb-2026
Page 4 of 27
PDF with 127 Questions

Which statement is true regarding the policy ID number of a firewall policy?

  1. Defines the order in which rules are processed.
  2. Represents the number of objects used in the firewall policy.
  3. Required to modify a firewall policy using the CLI.
  4. Changes when firewall policies are reordered.

Answer(s): C



An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose.



Where must the proxy address be used?

  1. As the source in a firewall policy.
  2. As the source in a proxy policy.
  3. As the destination in a firewall policy.
  4. As the destination in a proxy policy.

Answer(s): B



Which statement is true regarding SSL VPN timers? (Choose two.)

  1. Allow to mitigate DoS attacks from partial HTTP requests.
  2. SSL VPN settings do not have customizable timers.
  3. Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.
  4. Prevent SSL VPN users from being logged out because of high network latency.

Answer(s): A,D



Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

  1. The public key of the web server certificate must be installed on the browser.
  2. The web-server certificate must be installed on the browser.
  3. The CA certificate that signed the web-server certificate must be installed on the browser.
  4. The private key of the CA certificate that signed the browser certificate must be installed on the browser.

Answer(s): C



When using SD-WAN, how do you configure the next-hop gateway address for a member interface so that FortiGate can forward Internet traffic?

  1. It must be configured in a static route using the sdwan virtual interface.
  2. It must be provided in the SD-WAN member interface configuration.
  3. It must be configured in a policy-route using the sdwan virtual interface.
  4. It must be learned automatically through a dynamic routing protocol.

Answer(s): A






Post your Comments and Discuss Fortinet NSE4_FGT-6.0 exam prep with other Community members:

Join the NSE4_FGT-6.0 Discussion