QUESTION: 17

Examine the two static routes shown in the exhibit, then answer title following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

FortiGate will load balance all traffic across both routes.
FortiGate will use the port1 route as the primary candidate.
FortiGate will route twice as much traffic to the port2 route
FortiGate will only actuate the portl route m tlie routing table

Answer(s): C

Reveal Solution Next Question

QUESTION: 18

Which of the following statements about central NAT are true? (Choose two.)

IP tool references must be removed from existing firewall policies before enabling central NAT.
Central NAT can be enabled or disabled from the CLI only.
Source NAT, using central NAT, requires at least one central SNAT policy.
Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall policy.

Answer(s): A,B

Reveal Solution Next Question

QUESTION: 19

Refer to the following exhibit.

Why is FortiGate not blocking the test file over FTP download?

Deep-inspection must be enabled for FortiGate to fully scan FTP traffic.
FortiGate needs to be operating in flow-based inspection mode in order to scan FTP traffic.
The FortiSandbox signature database is required to successfully scan FTP traffic.
The proxy options profile needs to scan FTP traffic on a non-standard port.

Answer(s): D

Reveal Solution Next Question

QUESTION: 20

View the following exhibit, which shows the firewall policies and the object uses in the firewall policies.

Which of the following will be highlighted based oil the input criteria?

Policy with ID 1.
Policies with ID 2 and 3.
Policy with ID 5.
Policy with ID 4

Answer(s): B

Reveal Solution Next Question

Free NSE4_FGT-6.2 Exam Braindumps (page: 5)

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20