View the exhibit.

Which of the following statements are correct? (Choose two.)

This setup requires at least two firewall policies with the action set to IPsec.
Dead peer detection must be disabled to support this type of IPsec setup.
The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
This is a redundant IPsec setup.

Answer(s): C,D

Which one of the following processes is involved in updating IPS from FortiGuard?

Answer(s): C

How does FortiGate select the central SNAT policy that is applied to a TCP session?

It selects the SNAT policy specified in the configuration of the outgoing interface.
It selects the first matching central SNAT policy, reviewing from top to bottom.
It selects the central SNAT policy with the lowest priority.
It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.

Answer(s): B

Which of the following conditions are required for establishing an IPSec VPN between two FortiGate devices? (Choose two.)

If XAuth is enabled as a server in one peer, it must be enabled as a client in the other peer.
If the VPN is configured as route-based, there must be at least one firewall policy with the action set to IPSec.
If the VPN is configured as DialUp User in one peer, it must be configured as either Static IP Address or Dynamic DNS in the other peer.
If the VPN is configured as a policy-based in one peer, it must also be configured as policy-based in the other peer.

Answer(s): B,C

Free NSE4_FGT-6.0 Exam Braindumps (page: 8)