Free NSE4_FGT-6.4 Exam Braindumps
Fortinet NSE 4 - FortiOS 6.4 Questions 46–50 (page: 11)

Updated On: 10-Feb-2026

Refer to the exhibit.



Review the Intrusion Prevention System (IPS) profile signature settings.
Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

  1. The signature setting uses a custom rating threshold.
  2. The signature setting includes a group of other signatures.
  3. Traffic matching the signature will be allowed and logged.
  4. Traffic matching the signature will be silently dropped and logged.

Answer(s): D



Refer to the exhibit.



Which contains a Performance SLA configuration.
An administrator has configured a performance SLA on FortiGate.
Which failed to generate any traffic.
Why is FortiGate not generating any traffic for the performance SLA?

  1. Participants configured are not SD-WAN members.
  2. There may not be a static route to route the performance SLA traffic.
  3. The Ping protocol is not supported for the public servers that are configured.
  4. You need to turn on the Enable probe packets switch.

Answer(s): D


Reference:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/478384/performance-sla- linkmonitoring



Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

  1. Shut down/reboot a downstream FortiGate device.
  2. Disable FortiAnalyzer logging for a downstream FortiGate device.
  3. Log in to a downstream FortiSwitch device.
  4. Ban or unban compromised hosts.

Answer(s): A,B



Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

  1. Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.
  2. An SA never expires.
  3. A phase 1 SA is bidirectional, while a phase 2 SA is directional.
  4. Phase 2 SA expiration can be time-based, volume-based, or both.
  5. Both the phase 1 SA and phase 2 SA are bidirectional.

Answer(s): A,C,D



Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

  1. hard-timeout
  2. auth-on-demand
  3. soft-timeout
  4. new-session
  5. Idle-timeout

Answer(s): A,D,E

Explanation:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD37221



Viewing page 11 of 34
Viewing questions 51 - 55 out of 163 questions


Post your Comments and Discuss Fortinet NSE4_FGT-6.4 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!