support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Fortinet
  4. NSE4_FGT-6.0

Free NSE4_FGT-6.0 Exam Braindumps
Fortinet NSE 4 - FortiOS 6.0 Questions 51–55 (page: 12)

Updated On: 10-Feb-2026
Page 12 of 27
PDF with 127 Questions

Examine the exhibit, which shows the partial output of an IKE real-time debug.



Which of the following statement about the output is true?

  1. The VPN is configured to use pre-shared key authentication.
  2. Extended authentication (XAuth) was successful.
  3. Remote is the host name of the remote IPsec peer.
  4. Phase 1 went down.

Answer(s): A



If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

  1. A CRL
  2. A person
  3. A subordinate CA
  4. A root CA

Answer(s): D



What settings must you configure to ensure FortiGate generates logs for web filter activity on a firewall policy called Full Access? (Choose two.)

  1. Enable Event Logging.
  2. Enable a web filter security profile on the Full Access firewall policy.
  3. Enable Log Allowed Traffic on the Full Access firewall policy.
  4. Enable disk logging.

Answer(s): B,C



View the exhibit:



Which statement about the exhibit is true? (Choose two.)

  1. Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.
  2. port-VLAN1 is the native VLAN for the port1 physical interface.
  3. port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.
  4. Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.

Answer(s): A,C



An administrator is attempting to allow access to https://fortinet.com through a firewall policy that is configured with a web filter and an SSL inspection profile configured for deep inspection.
Which of the following are possible actions to eliminate the certificate error generated by deep inspection? (Choose two.)

  1. Implement firewall authentication for all users that need access to fortinet.com.
  2. Manually install the FortiGate deep inspection certificate as a trusted CA.
  3. Configure fortinet.com access to bypass the IPS engine.
  4. Configure an SSL-inspection exemption for fortinet.com.

Answer(s): A,D



  PDF
Viewing page 12 of 27
Viewing questions 56 - 60 out of 127 questions


Post your Comments and Discuss Fortinet NSE4_FGT-6.0 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!