Free NSE4_FGT-6.2 Exam braindumps download (NSE4_FGT-6.2 exam dumps Free)

If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

The Services field prevents SNAT and DNAT from being combined in the same policy.
The Services field is used when you need to bundle several VIPs into VIP groups.
The Services field removes the requirement to create multiple VIPs for different services.
The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer.

Answer(s): C

What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

Answer(s): A,C,E

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

Answer(s): D

Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

Browsers can be configured to retrieve this PAC file from the FortiGate.
Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
Any web request fortinet.com is allowed to bypass the proxy.

Answer(s): A,D

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
ADVPN is only supported with IKEv2.
Tunnels are negotiated dynamically between spokes.
Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

Answer(s): A,C

Free NSE4_FGT-6.2 Exam Braindumps Fortinet NSE 4 - FortiOS 6.2 Questions 41–45 (page: 10)