Note! Following NSE4_FGT-6.2 Exam is Retired now. Please select the alternative replacement for your Exam Certification. The new exam code is NSE4_FGT-7.2

NSE4_FGT-6.2 Exam Dumps - Fortinet NSE 4 - FortiOS 6.2

Go to page:

Question # 4

Which of the following conditions are required for establishing an IPSec VPN between two FortiGate devices? (Choose two.)

If XAuth is enabled as a server in one peer, it must be enabled as a client in the other peer.

If the VPN is configured as route-based, there must be at least one firewall policy with the action set to IPSec.

If the VPN is configured as DialUp User in one peer, it must be configured as either Static IP Address or Dynamic DNS in the other peer.

If the VPN is configured as a policy-based in one peer, it must also be configured as policy-based in the other peer.

Full Access

Question # 5

Which of the following FortiGate configuration tasks will create a route in the policy route table? (Choose two.)

Static route created with a Named Address object

Static route created with an Internet Services object

SD-WAN route created for individual member interfaces

SD-WAN rule created to route traffic based on link latency

Full Access

Question # 6

View the exhibit.

A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

Addicting.Games is allowed based on the Application Overrides configuration.

Addicting.Games is blocked on the Filter Overrides configuration.

Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.

Addcting.Games is allowed based on the Categories configuration.

Full Access

Question # 7

Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

FG-traffic VDOM

Root VDOM

Customer VDOM

Global VDOM

Full Access

Question # 8

An administration wants to throttle the total volume of SMTP sessions to their email server. Which of the following DoS sensors can be used to achieve this?

tcp_port_scan

ip_dst_session

udp_flood

ip_src_session

Full Access