Free NSE4_FGT-6.2 Exam Braindumps (page: 8)

Page 7 of 32

A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface.

Which statements about the VLAN sub interfaces can have the same VLAND ID, only if they have IP addresses in different subnets?

  1. The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.
  2. The two VLAN sub interfaces must have different VLAN IDs.
  3. The two VLAN sub interfaces can have the same VLAN ID, only if they belong to different VDOMs.
  4. The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.

Answer(s): B



You mc tasked to design a new IPsec deployment with the following criteria:

- There are two HQ sues that all satellite offices must connect to
- The satellite offices do not need to communicate directly with other satellite offices
- No dynamic routing will be used
- The design should minimize the number of tannels being configured.

Winch topology should be used to satisfy all of the requirements?

  1. Partial mesh
  2. Hub-and-spoke
  3. Fully meshed
  4. Redundant

Answer(s): C



Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

  1. By default, FortiGate uses WINS servers to resolve names.
  2. By default, the SSL VPN portal requires the installation of a client’s certificate.
  3. By default, split tunneling is enabled.
  4. By default, the admin GUI and SSL VPN portal use the same HTTPS port.

Answer(s): A



Which of the following conditions roust be met in order for a web browser to trust a web server certificate signed by a third-party CA?

  1. The web-server certificate DM be installed on the browser
  2. The public key of the web server certificate must be installed on die browser
  3. The CA certificate that signed the web-server certificate inutile installed on the browser
  4. The private key of the CA certificate that signed the browser certificate must be installed on the browser.

Answer(s): C






Post your Comments and Discuss Fortinet NSE4_FGT-6.2 exam with other Community members:

NSE4_FGT-6.2 Discussions & Posts