[2026] Fortinet NSE 4 - FortiOS 6.0 - NSE4_FGT-6.0 무료 시험 문제

문제1

On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)

A. store-and-upload

B. on-demand

C. hourly

D. real time

정답: A,D

문제2

An administrator is investigating a report of users having intermittent issues with browsing the web. The administrator ran diagnostics and received the output shown in the exhibit.

Examine the diagnostic output shown exhibit. Which of the following options is the most likely cause of this issue?

A. High memory usage

B. NAT port exhaustion

C. High CPU usage

D. High session timeout value

정답: B

문제3

View the exhibit.

VDOM1 is operating in transparent mode VDOM2 is operating in NAT Route mode. There is an inteface VDOM link between both VDOMs. A client workstation with the IP address 10.0.1.10/24 is connected to port2. A web server with the IP address 10.200.1.2/24 is connected to port1.
What is required in the FortiGate configuration to route and allow connections from the client workstation to the web server? (Choose two.)

A. A static or dynamic route in VDOM1 with the subnet 10.200.1.0/24 as the destination.

B. One firewall policy in VDOM2 with InterVDOM1 as the source interface and port1 as the destination interface.

C. A static or dynamic route in VDOM2 with the subnet 10.0.1.0/24 as the destination.

D. One firewall policy in VDOM1 with port2 as the source interface and InterVDOM0 as the destination interface.

정답: D

문제4

Which statements about DNS filter profiles are true? (Choose two.)

A. They can redirect blocked requests to a specific portal.

B. They can inspect HTTP traffic.

C. They can block DNS requests to known botnet command and control servers.

D. They must be applied in firewall policies with SSL inspection enabled.

정답: A,C

문제5

Examine the routing database shown in the exhibit, and then answer the following question:

Which of the following statements are correct? (Choose two.)

A. The port3 default route has the lowest metric.

B. The port3 default route has the highest distance.

C. There will be eight routes active in the routing table.

D. The port1 and port2 default routes are active in the routing table.

정답: B,D

문제6

Which of the following static routes are not maintained in the routing table?

A. Policy routes

B. Dynamic routes

C. Named Address routes

D. ISDB routes

정답: A

문제7

Which one of the following processes is involved in updating IPS from FortiGuard?

A. Protocol decoder update requests are sent to service.fortiguard.net.

B. IPS signature update requests are sent to update.fortiguard.net.

C. IPS engine updates can only be obtained using push updates.

D. FortiGate IPS update requests are sent using UDP port 443.

정답: B

문제8

An employee connects to the https://example.com on the Internet using a web browser. The web server's certificate was signed by a private internal CA. The FortiGate that is inspecting this traffic is configured for full SSL inspection.
This exhibit shows the configuration settings for the SSL/SSH inspection profile that is applied to the policy that is invoked in this instance. All other settings are set to defaults. No certificates have been imported into FortiGate. View the exhibit and answer the question that follows.

Which certificate is presented to the employee's web browser?

A. The web server's certificate.

B. A certificate signed by Fortinet_CA_SSL.

C. The user's personal certificate signed by a private internal CA.

D. A certificate signed by Fortinet_CA_Untrusted.

정답: D

Fortinet NSE 4 - FortiOS 6.0 - NSE4_FGT-6.0무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트