NSE4_FGT-6.4 Exam - Free Actual Q&As, Page 1

NSE4_FGT-6.4 Actual Exam Questions

Last updated on Nov. 27, 2024.

Vendor:Fortinet

Exam Code:NSE4_FGT-6.4

Exam Name:Fortinet NSE 4 - FortiOS 6.4

Exam Questions:121

Question #1 Topic 1

Which two statements are true when FortiGate is in transparent mode? (Choose two.)

A. By default, all interfaces are part of the same broadcast domain.
B. The existing network IP schema must be changed when installing a transparent mode FortiGate in the network.
C. Static routes are required to allow traffic to the next hop.
D. FortiGate forwards frames without changing the MAC address.

Correct Answer: AD 🗳️

Question #2 Topic 1

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

Correct Answer: D 🗳️

Question #3 Topic 1

Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

A. For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password.
B. FortiGate supports pre-shared key and signature as authentication methods.
C. Enabling XAuth results in a faster authentication because fewer packets are exchanged.
D. A certificate is not required on the remote peer when you set the signature as the authentication method.