Free NSE4_FGT-6.4 Exam Braindumps (page: 12)

Page 12 of 24

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

  1. Heartbeat interfaces have virtual IP addresses that are manually assigned.
  2. A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.
  3. Virtual IP addresses are used to distinguish between cluster members.
  4. The primary device in the clusteris always assigned IP address 169.254.0.1.

Answer(s): A,B



Which two statements about antivirus scanning mode are true? (Choose two.)

  1. In proxy-based inspection mode, files bigger than the buffer size are scanned.
  2. In flow-based inspection mode. FortiGate buffers the file, but also simultaneously transmits it to the client.
  3. In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.
  4. In flow-based inspection mode, files bigger than the buffer size are scanned.

Answer(s): C,D



Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

  1. System time
  2. FortiGuaid update servers
  3. Operating mode
  4. NGFW mode

Answer(s): A,D



Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

  1. This is known as many-to-one NAT.
  2. Source IP is translated to the outgoing interface IP.
  3. Connections are tracked using source port and source MAC address.
  4. Port address translation is not used.

Answer(s): A,B



Page 12 of 24



Post your Comments and Discuss Fortinet NSE4_FGT-6.4 exam with other Community members:

Masssy commented on July 03, 2021
Bohod Achhaa yar. Exact questions from real test.
INDIA
upvote

Danny commented on July 03, 2021
Well-put and very precise. It contains all the questions in real exam.
CANADA
upvote