support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Fortinet
  4. NSE4_FGT-6.0

Free NSE4_FGT-6.0 Exam Braindumps
Fortinet NSE 4 - FortiOS 6.0 Questions 36–40 (page: 9)

Updated On: 10-Feb-2026
Page 9 of 27
PDF with 127 Questions

An administration wants to throttle the total volume of SMTP sessions to their email server.
Which of the following DoS sensors can be used to achieve this?

  1. tcp_port_scan
  2. ip_dst_session
  3. udp_flood
  4. ip_src_session

Answer(s): A



Why must you use aggressive mode when a local FortiGate IPSec gateway hosts multiple dialup tunnels?

  1. In aggressive mode, the remote peers are able to provide their peer IDs in the first message.
  2. FortiGate is able to handle NATed connections only in aggressive mode.
  3. FortiClient only supports aggressive mode.
  4. Main mode does not support XAuth for user authentication.

Answer(s): A



Examine this output from a debug flow:



Why did the FortiGate drop the packet?

  1. The next-hop IP address is unreachable.
  2. It failed the RPF check.
  3. It matched an explicitly configured firewall policy with the action DENY.
  4. It matched the default implicit firewall policy.

Answer(s): D



View the exhibit:



The client cannot connect to the HTTP web server. The administrator ran the FortiGate built-in sniffer and got the following output:



What should be done next to troubleshoot the problem?

  1. Run a sniffer in the web server.
  2. Execute another sniffer in the FortiGate, this time with the filter "host 10.0.1.10".
  3. Capture the traffic using an external sniffer connected to port1.
  4. Execute a debug flow.

Answer(s): D



Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)

  1. They can be configured in both NAT/Route and transparent operation modes.
  2. They support L2TP-over-IPsec.
  3. They require two firewall policies: one for each directions of traffic flow.
  4. They support GRE-over-IPsec.

Answer(s): A,B



  PDF
Viewing page 9 of 27
Viewing questions 41 - 45 out of 127 questions


Post your Comments and Discuss Fortinet NSE4_FGT-6.0 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!