Free NSE4_FGT-6.2 Exam braindumps download (NSE4_FGT-6.2 exam dumps Free)

QUESTION: 36

View the exhibit.

A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

Addicting.Games is allowed based on the Application Overrides configuration.
Addicting.Games is blocked on the Filter Overrides configuration.
Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.
Addcting.Games is allowed based on the Categories configuration.

Answer(s): A

Show Answer Next Question

QUESTION: 37

Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

It always authorizes the traffic without requiring authentication.
It drops the traffic.
It authenticates the traffic using the authentication scheme SCHEME2.
It authenticates the traffic using the authentication scheme SCHEME1.

Answer(s): D

Explanation:

"What happens to traffic that requires authorization, but does not match any authentication rule? The active and passive SSO schemes to use for those cases is defined under config authentication setting"

Show Answer Next Question

QUESTION: 38

Which statement about the IP authentication header (AH) used by IPsec is true?

AH does not provide any data integrity or encryption.
AH does not support perfect forward secrecy.
AH provides data integrity bur no encryption.
AH provides strong data integrity but weak encryption.

Answer(s): C

Show Answer Next Question

QUESTION: 39

Refer to the exhibit.

The exhibits show a network diagram and the explicit web proxy configuration. In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?