NSE4_FGT_AD-7.6 Free Practice Test

What are two features of FortiGate FSSO agentless polling mode? (Choose two.)

1. A. FortiGate uses the AD server as the collector agent.
2. B. FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
3. C. FortiGate does not support workstation check.
4. D. FortiGate directs the collector agent to use a remote LDAP server.

Correct Answer: BC

An administrator wants to form an HA cluster using the FGCP protocol.
Which two requirements must the administrator ensure both members fulfill? (Choose two.)

1. A. They must have the same hard drive configuration.
2. B. They must have the same number of configured VDOMs.
3. C. They must have the heartbeat interfaces in the same subnet
4. D. They must have the same HA group ID.

Correct Answer: BD

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

1. A. The option invalid SSL certificates is set to allow on the SSL/SSH inspection profile.
2. B. The matching firewall policy is set to proxy inspection mode.
3. C. The browser does not trust the certificate used by FortiGate for SSL inspection.
4. D. The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.

Correct Answer: C

Refer to the exhibits.


The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.
The WAN (port2) interface has the IP address 100.65.0.101/24.
The LAN (port4) interface has the IP address 10.0.11.254/24.
Which IP address will be used to source NAT (SNAT) the traffic, if the user on HQ-PC-1 (10.0.11.50) pings the IP address of BR-FGT (100.65.1.111)?

1. A. 100.65.0.101
2. B. 100.65.0.49
3. C. 100.65.0.149
4. D. 100.65.0.99

Correct Answer: D

Refer to the exhibits.


You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.
You cannot access any of the Google applications, but you are able to access www.fortinet.com.
Which two actions would you take to resolve the issue? (Choose two.)

1. A. Set SSL inspection to deep-content inspection.
2. B. Move up Google in the Application and Filter Overrides section to set its priority lot
3. C. Add "Google".com to the URL category in the security profile.
4. D. Change the Inspection mode to Flow-based
5. E. Set the action for Google in the Application and Filter Overrides section to Allow

Correct Answer: BE