Free NSE4_FGT-6.0 Exam braindumps download (NSE4_FGT-6.0 exam dumps Free)

QUESTION: 11

Which statement is true regarding the policy ID number of a firewall policy?

Defines the order in which rules are processed.
Represents the number of objects used in the firewall policy.
Required to modify a firewall policy using the CLI.
Changes when firewall policies are reordered.

Answer(s): C

QUESTION: 12

An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose.

Where must the proxy address be used?

As the source in a firewall policy.
As the source in a proxy policy.
As the destination in a firewall policy.
As the destination in a proxy policy.

Answer(s): B

Show Answer Next Question

QUESTION: 13

Which statement is true regarding SSL VPN timers? (Choose two.)

Allow to mitigate DoS attacks from partial HTTP requests.
SSL VPN settings do not have customizable timers.
Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.
Prevent SSL VPN users from being logged out because of high network latency.

Answer(s): A,D

Show Answer Next Question

QUESTION: 14

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

The public key of the web server certificate must be installed on the browser.
The web-server certificate must be installed on the browser.
The CA certificate that signed the web-server certificate must be installed on the browser.
The private key of the CA certificate that signed the browser certificate must be installed on the browser.

Answer(s): C

Show Answer Next Question