Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE4_FGT-6.0

Fortinet NSE4_FGT-6.0 Exam Questions
Fortinet NSE 4 - FortiOS 6.0 (Page 3 )

Updated On: 21-Feb-2026
Page 3 of 27
PDF with 127 Questions

An administrator has configured central DNAT and virtual IPs.
Which of the following can be selected in the firewall policy Destination field?

  1. A VIP group
  2. The mapped IP address object of the VIP object
  3. A VIP object
  4. An IP pool

Answer(s): C



An administrator needs to strengthen the security for SSL VPN access.
Which of the following statements are best practices to do so? (Choose three.)

  1. Configure split tunneling for content inspection.
  2. Configure host restrictions by IP or MAC address.
  3. Configure two-factor authentication using security certificates.
  4. Configure SSL offloading to a content processor (FortiASIC).
  5. Configure a client integrity check (host-check).

Answer(s): C,D,E



Which statement about FortiGuard services for FortiGate is true?

  1. The web filtering database is downloaded locally on FortiGate.
  2. Antivirus signatures are downloaded locally on FortiGate.
  3. FortiGate downloads IPS updates using UDP port 53 or 8888.
  4. FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.

Answer(s): B



Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)

  1. Priority
  2. Metric
  3. Distance
  4. Cost

Answer(s): A,C



View the exhibit.



Based on this output, which statements are correct? (Choose two.)

  1. The all VDOM is not synchronized between the primary and secondary FortiGate devices.
  2. The root VDOM is not synchronized between the primary and secondary FortiGate devices.
  3. The global configuration is synchronized between the primary and secondary FortiGate devices.
  4. The FortiGate devices have three VDOMs.

Answer(s): B,C






Post your Comments and Discuss Fortinet NSE4_FGT-6.0 exam dumps with other Community members:

Join the NSE4_FGT-6.0 Discussion