NSE4_FGT_AD-7.6 Free Practice Test

You have created a web filter profile named restrictmedia-profile with a daily category usage quota.
When you are adding the profile to the firewall policy, the restrict_media-profile is not listed in the available web profile drop down.
What could be the reason?

1. A. The web filter profile is already referenced in another firewall policy.
2. B. The firewall policy is in no-inspection mode instead of deep-inspection.
3. C. The naming convention used in the web filter profile is restricting it in the firewall policy.
4. D. The inspection mode in the firewall policy is not matching with web filter profile feature set.

Correct Answer: D

Refer to the exhibit.

Which two statements about the FortiGuard connection are true? (Choose two.)

1. A. The weight increases as the number of failed packets rises
2. B. You can configure unreliable protocols to communicate with FortiGuard Server.
3. C. FortiGate identified the FortiGuard Server using DNS lookup.
4. D. FortiGate is using the default port for FortiGuard communication.

Correct Answer: AD

Refer to the exhibit.

An SD-WAN zone configuration on the FortiGate GUI is shown. Based on the exhibit, which statement is true?

1. A. The Underlay zone contains no member.
2. B. The virtual-wan-link and overlay zones can be deleted
3. C. The Underlay zone is the zone by default.
4. D. port2 and port3 are not assigned to a zone.

Correct Answer: A

You have configured the below commands on a FortiGate.

What would be the impact of this configuration on FortiGate?

1. A. FortiGate will enable strict RPF on all its interfaces and porti will be exempted from RPF checks.
2. B. FortiGate will enable strict RPF on all its interfaces and porti will be enable for asymmetric routing.
3. C. The global configuration will take precedence and FortiGate will enable strict RPF on all interfaces.
4. D. Port1 will be enabled with flexible RP
5. E. and all other interfaces will be enabled for strict RPF

Correct Answer: A

Refer to the exhibits.



A diagram of a FortiGate device connected to the network, as well as the firewall policy and IP pool configuration on the FortiGate device are shown.
Two PCs. PC1 and PC2, are connected behind FortiGate and can access the internet successfully. However, when the administrator adds a third PC to the network (PC3), the PC cannot connect to the internet.
Based on the information shown in the exhibit, which two configuration options can the administrator use to fix the connectivity issue for PC3? (Choose two.)

1. A. In the system settings, set Multiple Interface Policies to enable.
2. B. in the IP pool configuration, set end ipto 100.65.0.112.
3. C. In the firewall policy, set match-vip to enable using CLI.
4. D. In the IP pool configuration, set type to overload.

Correct Answer: BD