Fortinet NSE4_FGT-6.2 Exam Questions
Fortinet NSE 4 - FortiOS 6.2 (Page 4 )

You have tasked to design a new IPsec deployment with the following criteria:
* All satellite offices must connect to the two HQ sites.
* The satellite offices do not need to communicate directly with other satellite offices.
* Backup VPN is not required.
* The design should minimize the number of tunnels being configured.
Which topology should be used to satisfy all of the requirements?

What criteria does FortiGate use to look for a matching firewall policy to process traffic? (Choose two.)

You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below:



When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

Which of the following statements about NTLM authentication are correct? (Choose two.)

Examine the network diagram shown in the exhibit, and then answer the following question:



A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24.
Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)