Free NSE4_FGT-6.2 Exam Braindumps

Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

  1. The VPN is configured to use pre-shared key authentication.
  2. Extended authentication (XAuth) was successful.
  3. Remote is the host name of the remote IPsec peer.
  4. Phase 1 went down.

Answer(s): A



Examine the network diagram shown in the exhibit, and then answer the following question:

A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

  1. 172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0]
  2. 172.20.2.0/24 (25/0) via 10.10.3.2, port3 [5/0]
  3. 172.20.2.0/24 (1/150) via 10.10.3.2, port3 [10/0]
  4. 172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]

Answer(s): A,B



On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)

  1. hourly
  2. real tune
  3. on-demand
  4. store-and-upload

Answer(s): B,D



Examine this FortiGate configuration:


Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

  1. It is allowed, but with no inspection
  2. It is allowed and inspected as long as the inspection is flow based
  3. It is dropped.
  4. It is allowed and inspected, as long as the only inspection required is antivirus.

Answer(s): C






Post your Comments and Discuss Fortinet NSE4_FGT-6.2 exam with other Community members:

NSE4_FGT-6.2 Discussions & Posts