NSE4_FGT_AD-7.6 Fortinet Exam Questions and Free Practice Test

Question 13

Refer to the exhibit.
NSE4_FGT_AD-7.6 dumps exhibit
Why is the Antivirus scan switch grayed out when you are creating a new antivirus profile for FTP?

A. Antivirus scan is disabled under System -> Feature visibility

B. None of the inspected protocols are active in this profile.

C. The Feature Set for the profile is Flow-based but it must be Proxy-based

D. FortiGat

E. with less than 2 GB RA

F. does not support the Antivirus scan feature.

Correct Answer:B

Question 14

Refer to the exhibit.
NSE4_FGT_AD-7.6 dumps exhibit
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

A. On BR1-FGT, set Remote Address to 10.0.11.0/255.255.255.0.

B. On HQ-NGF

C. enable Diffie-Hellman Group 2.

D. On BR1-FG

E. set Seconds to 43200

F. On HQ-NGF

G. set Encryption to AES256.

Correct Answer:AD

Question 15

Refer to the exhibit.
NSE4_FGT_AD-7.6 dumps exhibit
Based on this partial configuration, what are the two possible outcomes when FortiGate enters conserve mode? (Choose two.)

A. FortiGate drops new sessions requiring inspection.

B. Administrators must restart FortiGate to allow new sessions.

C. Administrators cannot change the configuration.

D. FortiGate skips quarantine actions.

Correct Answer:CD

Question 16

Which three statements explain a flow-based antivirus profile? (Choose three answers)

A. FortiGate buffers the whole file but transmits to the client at the same time.

B. Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.

C. If a virus is detected, the last packet is delivered to the client.

D. Flow-based inspection optimizes performance compared to proxy-based inspection.

E. The IPS engine handles the process as a standalone.

Correct Answer:ABD

Question 17

Refer to the exhibits.
NSE4_FGT_AD-7.6 dumps exhibit

A diagram of a FortiGate device connected to the network VIP object and firewall policy configurations are shown.
The WAN (port2) interface has the IP address 100.65.0.101/24.
The LAN (port4) interface has the IP address 10.0.11.254/24.
If the host 100.65.1.111 sends a TCP SYN packet on port 443 to 100.65.0.200. what will the source address, destination address, and destination port of the packet be at the time FortiGate forwards the packet to the destination?

A. 10.0.11.254, 100.65.0.200. and 443, respectively

B. 10.0.11.254, 10.0.15.50, and 4443. respectively

C. 100.65.1. ill, 10.0.11.50, and 4443. respectively

D. 100.65.1.111, 10.0.11.50. and 443. respectively

Correct Answer:C

Question 18

Which two components are part of the secure internet access (SIA) agent-based mode on FortiSASE? (Choose two.)

A. FortiSASE Firewall-as-a-Service (FWaaS)

B. The proxy auto-configuration (PAC) file

C. VPN policies

D. FortiExtender

Correct Answer:AC

START NSE4_FGT_AD-7.6 EXAM