Fortinet NSE4_FGT-6.4 問題集

質問 1：
Refer to the exhibit, which contains a radius server configuration.

An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option.
What will be the impact of using Include in every user group option in a RADIUS configuration?
A. This option places the RADIUS server, and all users who can authenticate against that server, into every RADIUS group.
B. This option places all FortiGate users and groups required to authenticate into the RADIUS server, which, in this case, is FortiAuthenticator.
C. This option places the RADIUS server, and all users who can authenticate against that server, into every FortiGate user group.
D. This option places all users into every RADIUS user group, including groups that are used for the LDAP server on FortiGate.
正解：C

質問 2：
How do you format the FortiGate flash disk?
A. Load the hardware test (HQIP) image.
B. Load a debug FortiOS image.
C. Execute the CLI command execute formatlogdisk.
D. Select the format boot device option from the BIOS menu.
正解：D

質問 3：
Which Security rating scorecard helps identify configuration weakness and best practice violations in your network?
A. Security Posture
B. Fabric Coverage
C. Automated Response
D. Optimization
正解：A

質問 4：
An administrator has configured the following settings:

A. Denied users are blocked for 30 minutes.
B. A session for denied traffic is created.
C. The number of logs generated by denied traffic is reduced.
D. Device detection on all interfaces is enforced for 30 minutes.
正解：B,C

質問 5：
Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?
A. The public key of the web server certificate must be installed on the browser.
B. The web-server certificate must be installed on the browser.
C. The private key of the CA certificate that signed the browser certificate must be installed on the browser.
D. The CA certificate that signed the web-server certificate must be installed on the browser.
正解：D

質問 6：
Which two statements are true about the FGCP protocol? (Choose two.)
A. Runs only over the heartbeat links
B. Is used to discover FortiGate devices in different HA groups
C. Not used when FortiGate is in Transparent mode
D. Elects the primary FortiGate device
正解：A,D

質問 7：
Refer to the exhibit.

The exhibit shows proxy policies and proxy addresses, the authentication rule and authentication scheme, users, and firewall address.
An explicit web proxy is configured for subnet range 10.0.1.0/24 with three explicit web proxy policies.
The authentication rule is configured to authenticate HTTP requests for subnet range 10.0.1.0/24 with a form-based authentication scheme for the FortiGate local user database. Users will be prompted for authentication.
How will FortiGate process the traffic when the HTTP request comes from a machine with the source IP 10.0.1.10 to the destination http://www.fortinet.com? (Choose two.)
A. If a Microsoft Internet Explorer browser is used with User-B credentials, the HTTP request will be allowed.
B. If a Google Chrome browser is used with User-B credentials, the HTTP request will be allowed.
C. If a Mozilla Firefox browser is used with User-B credentials, the HTTP request will be allowed.
D. If a Mozilla Firefox browser is used with User-A credentials, the HTTP request will be allowed.
正解：A,B

質問 8：
Examine the exhibit, which contains a virtual IP and firewall policy configuration.



The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?
A. 10.200.1.1
B. Any available IP address in the WAN (port1) subnet 10.200.1.0/24
C. 10.0.1.254
D. 10.200.1.10
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Refer to the exhibit.

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?
A. The session is in FIN_ACK state.
B. The session is in ESTABLISHED state.
C. The session is in FTN_WAIT state.
D. The session is in SYN_SENT state.
正解：D
解説: (Topexam メンバーにのみ表示されます)