support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Fortinet
  4. NSE4_FGT-6.4

Free NSE4_FGT-6.4 Exam Braindumps
Fortinet NSE 4 - FortiOS 6.4 Questions 31–35 (page: 8)

Updated On: 10-Feb-2026
Page 8 of 34
PDF with 163 Questions

An administrator is running the following sniffer command:



Which three pieces of Information will be Included in me sniffer output? {Choose three.)

  1. Interface name
  2. Packet payload
  3. Ethernet header
  4. IP header
  5. Application header

Answer(s): A,B,D



Refer to the exhibit.



The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses. How does FortiGate process the traffic sent to http://www.fortinet.com?

  1. Traffic will be redirected to the transparent proxy and it will be allowed by proxy policy ID 3.
  2. Traffic will not be redirected to the transparent proxy and it will be allowed by firewall policy ID 1.
  3. Traffic will be redirected to the transparent proxy and It will be allowed by proxy policy ID 1.
  4. Traffic will be redirected to the transparent proxy and it will be denied by the proxy implicit deny policy.

Answer(s): D



An administrator has configured a strict RPF check on FortiGate.
Which statement is true about the strict RPF check?

  1. The strict RPF check is run on the first sent and reply packet of any new session.
  2. Strict RPF checks the best route back to the source using the incoming interface.
  3. Strict RPF checks only for the existence of at cast one active route back to the source using the incoming interface.
  4. Strict RPF allows packets back to sources with all active routes.

Answer(s): B



Refer to the exhibit.



The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.

The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the Internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem.

Which two statements are true? (Choose two.)

  1. Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
  2. A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
  3. Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
  4. Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.

Answer(s): A,D



Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

  1. The keyUsage extension must be set to keyCertSign.
  2. The common name on the subject field must use a wildcard name.
  3. The issuer must be a public CA.
  4. The CA extension must be set to TRUE.

Answer(s): A,D



  PDF
Viewing page 8 of 34
Viewing questions 36 - 40 out of 163 questions


Post your Comments and Discuss Fortinet NSE4_FGT-6.4 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!