support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Fortinet
  4. NSE4_FGT-6.4

Free NSE4_FGT-6.4 Exam Braindumps
Fortinet NSE 4 - FortiOS 6.4 Questions 56–60 (page: 13)

Updated On: 10-Feb-2026
Page 13 of 34
PDF with 163 Questions

Examine the network diagram shown in the exhibit, then answer the following question:



Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

  1. 172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]
  2. 0.0.0.0/0 [20/0] via 10.4.200.2, port2
  3. 10.4.200.0/30 is directly connected, port2
  4. 172.16.32.0/24 is directly connected, port1

Answer(s): D



Which of the following statements about central NAT are true? (Choose two.)

  1. IP tool references must be removed from existing firewall policies before enabling central NAT.
  2. Central NAT can be enabled or disabled from the CLI only.
  3. Source NAT, using central NAT, requires at least one central SNAT policy.
  4. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

Answer(s): A,B



Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

  1. The public key of the web server certificate must be installed on the browser.
  2. The web-server certificate must be installed on the browser.
  3. The CA certificate that signed the web-server certificate must be installed on the browser.
  4. The private key of the CA certificate that signed the browser certificate must be installed on the browser.

Answer(s): C



View the exhibit.



A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

  1. Addicting.Games is allowed based on the Application Overrides configuration.
  2. Addicting.Games is blocked on the Filter Overrides configuration.
  3. Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.
  4. Addcting.Games is allowed based on the Categories configuration.

Answer(s): A



Examine this FortiGate configuration:



How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

  1. It always authorizes the traffic without requiring authentication.
  2. It drops the traffic.
  3. It authenticates the traffic using the authentication scheme SCHEME2.
  4. It authenticates the traffic using the authentication scheme SCHEME1.

Answer(s): D

Explanation:

"What happens to traffic that requires authorization, but does not match any authentication rule? The active and passive SSO schemes to use for those cases is defined under config authentication setting"



  PDF
Viewing page 13 of 34
Viewing questions 61 - 65 out of 163 questions


Post your Comments and Discuss Fortinet NSE4_FGT-6.4 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!