Free NSE4_FGT-6.4 Exam Braindumps
Fortinet NSE 4 - FortiOS 6.4 Questions 41–45 (page: 10)

Updated On: 10-Feb-2026

Which type of logs on FortiGate record information about traffic directly to and from the FortiGate management IP addresses?

  1. System event logs
  2. Forward traffic logs
  3. Local traffic logs
  4. Security logs

Answer(s): C



Refer to the exhibit.



Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

  1. Custom permission for Network
  2. Read/Write permission for Log & Report
  3. CLI diagnostics commands permission
  4. Read/Write permission for Firewall

Answer(s): C

Explanation:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD50220



Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

  1. diagnose wad session list
  2. diagnose wad session list | grep hook-pre&&hook-out
  3. diagnose wad session list | grep hook=pre&&hook=out
  4. diagnose wad session list | grep "hook=pre"&"hook=out"

Answer(s): A



A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.

What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

  1. Static IP Address
  2. Dialup User
  3. Dynamic DNS
  4. Pre-shared Key

Answer(s): B



Refer to the exhibit.



Examine the intrusion prevention system (IPS) diagnostic command.

Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

  1. The IPS engine was inspecting high volume of traffic.
  2. The IPS engine was unable to prevent an intrusion attack.
  3. The IPS engine was blocking all traffic.
  4. The IPS engine will continue to run in a normal state.

Answer(s): A



Viewing page 10 of 34
Viewing questions 46 - 50 out of 163 questions


Post your Comments and Discuss Fortinet NSE4_FGT-6.4 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!