NSE4_FGT_AD-7.6 Exam Training Practice Tests (Fortinet NSE 4

Question 1

Refer to the exhibits.

You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.
Which two factors can you observe from these configurations? (Choose two.)

A. Facebook access is allowed but you cannot play Facebook videos based on Video/Audio category filter settings. B. Facebook access is blocked based on the category filter settings. C. YouTube access is blocked based on Excessive-Bandwidth Application and Filter override settings. D. YouTube search is allowed based on the Google Application and Filter override settings.

Correct Answer: B,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

What are three key routing principles in SD-WAN? (Choose three answers)

A. SD-WAN rules have precedence over any other type of routes. B. By default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member. C. By default, SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination. D. By default, SD-WAN rules are skipped if only one route to the destination is available. E. Regular policy routes have precedence over SD-WAN rules.

Correct Answer: B,C,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Which three statements about SD-WAN performance SLAs are true? (Choose three.)

A. They are applied in a SD-WAN rule lowest cost strategy. B. They monitor the state of the FortiGate device. C. They can be measured actively or passively. D. All the SLA targets can be configured. E. They rely on session loss and jitter.

Correct Answer: A,C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit.

Based on the routing table shown in the exhibit, which two statements are true? (Choose two.)

A. A packet with the source IP address 10.100.110.10 arriving on port3 is allowed if strict RPF is disabled. B. A packet with the source IP address 10.100.110.10 arriving on port2 is allowed if strict RPF is enabled. C. A packet with the source IP address 10.10.10.10 arriving on port2 is allowed if strict RPF is enabled. D. A packet with the source IP address 10.0.13.10 arriving on port2 is allowed if strict RPF is disabled.

Correct Answer: A,D

Question 5

You have configured an application control profile, set peer-to-peer traffic to Block under the Categories tab.
and applied it to the firewall policy. However, your peer-to-peer traffic on known ports is passing through the FortiGate without being blocked.
What FortiGate settings should you check to resolve this issue?

A. FortiGuard category ratings B. Network Protocol Enforcement C. Application and Filter Overrides D. Replacement Messages for UDP-based Applications

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

What are two features of collector agent advanced mode? (Choose two.)

A. Advanced mode uses the Windows convention-NetBios: Domain\Username. B. In advanced mode, security profiles can be applied only to user groups, not individual users. C. In advanced mode. FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate. D. Advanced mode supports nested or inherited groups.

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Refer to the exhibits.

The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details. Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming? (Choose one answer)

A. Apple FaceTime will be allowed, based on the Apple filter configuration. B. Apple FaceTime will be allowed, based on the Video/Audio category configuration. C. Apple FaceTime will be allowed only if the Apple filter in Application and Filter Overrides is set to Allow. D. Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

Refer to the exhibits.

The exhibits show the system performance output and default configuration of high memory usage thresholds on a FortiGate device.
Based on the system performance output, what are the two possible outcomes? (Choose two.)

A. FortiGate has entered conserve mode. B. Administrators can change the configuration. C. FortiGate drops new sessions. D. Administrators can access FortiGate only through the console port.

Correct Answer: A,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

You have configured an application control profile, set peer-o-peer traffic to Block under the Categories tab, and applied it to the firewall policy. However, you peer-to-peer traffic on known ports is passing through the FortiGate without being blocked. What FortiGate settings should you check to resolve this issue?

A. FortiGuard category ratings B. Network Protocol Enforcement C. Application and Filter Overrides D. Replacement Messages for UDP-based Applications

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Exhibits:

You are asked to implement an antivirus profile for files downloaded through FTP, HTTP, and HTTPS.
While testing, you are successful with HTTP and FTP protocols, but FortiGate does not block the file download over HTTPS.
What could be the cause?

A. The action on the firewall policy is not set to deny. B. The SSL inspection mode in the firewall policy is not deep content inspection. C. Web filter is not enabled on the firewall policy to complement the antivirus profile. D. The feature set in the antivirus profile is not set to Flow-based.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 4 - FortiOS 7.6 Administrator - NSE4_FGT_AD-7.6 Exam Practice Test