support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Fortinet
  4. NSE4_FGT-6.4

Free NSE4_FGT-6.4 Exam Braindumps
Fortinet NSE 4 - FortiOS 6.4 Questions 51–55 (page: 12)

Updated On: 10-Feb-2026
Page 12 of 34
PDF with 163 Questions

NGFW mode allows policy-based configuration for most inspection rules.
Which security profile's configuration does not change when you enable policy-based inspection?

  1. Web filtering
  2. Antivirus
  3. Web proxy
  4. Application control

Answer(s): B



Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

  1. The firmware image must be manually uploaded to each FortiGate.
  2. Only secondary FortiGate devices are rebooted.
  3. Uninterruptable upgrade is enabled by default.
  4. Traffic load balancing is temporally disabled while upgrading the firmware.

Answer(s): C,D



Which statement regarding the firewall policy authentication timeout is true?

  1. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.
  2. It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.
  3. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MA
  4. It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.

Answer(s): A



Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

  1. Lookup is done on the first packet from the session originator
  2. Lookup is done on the last packet sent from the responder
  3. Lookup is done on every packet, regardless of direction
  4. Lookup is done on the trust reply packet from the responder

Answer(s): A,D



A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface.
Which statements about the VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

  1. The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.
  2. The two VLAN sub interfaces must have different VLAN IDs.
  3. The two VLAN sub interfaces can have the same VLAN ID, only if they belong to different VDOMs.
  4. The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.

Answer(s): B

Explanation:

FortiGate_Infrastructure_6.0_Study_Guide_v2-Online.pdf ­> page 147 "Multiple VLANs can coexist in the same physical interface, provide they have different VLAN ID"



  PDF
Viewing page 12 of 34
Viewing questions 56 - 60 out of 163 questions


Post your Comments and Discuss Fortinet NSE4_FGT-6.4 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!