Latest Fortinet NSE4_FGT-6.2 Practice Test Questions, Fortinet NSE 4 – FortiOS 6.2 Exam Dumps [Q84-Q106]

Q84. HTTP Public Key Pinning (HPKP) can be an obstacle to implementing full SSL inspection. What solutions could resolve this problem? (Choose two.)

Q85. View the exhibit.

A
user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

Q86. Refer to the exhibit.

The exhibit shows admission control settings.
Which users and user groups are allowed access to the network through captive portal?

Q87. How can you block or allow to Twitter using a firewall policy?

Q88. Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

Q89. HTTP public key pinning (HPKP) can be an obstacle to implementing full SSL inspection.
In which two ways can you resolve this problem? (Choose two.)

Q90. Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

Q91. Examine the exhibit, which contains a session diagnostic output.

Which of the following statements about the session diagnostic output is true?

Q92. Refer to the exhibit.
You are configuring the root FortiGate to implement the Security Fabric. You are configuring port10 to communicate with a downstream FortiGate. The exhibit shows the default Edit Interface.

When configuring the root FortiGate to communicate with a downstream FortiGate, which two settings must you configure? (Choose two.)

Q93. When using WPAD DNS method, which FQDN format do browsers use to query the DNS server?

Q94. Examine this output from a debug flow:

Why did the FortiGate drop the packet?

Q95. Refer to the exhibit.

The exhibit shows a FortiGate configuration.
How does FortiGate handle web proxy traffic coming from the IP address 10.2.1.200, that requires authorization?

Q96. Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?

Q97. Examine the following web filtering log.

Which statement about the log message is true?

Q98. Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

Q99. View the following exhibit, which shows the firewall policies and the object uses in the firewall policies.


The administrator is using the Policy Lookup feature and has entered the search create shown in the following exhibit.

Which of the following will be highlighted based on the input criteria?

Q100. Examine the two static routes shown in the exhibit, then answer the following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

Q101. Refer to the exhibit.

The exhibit shows two static routes.
Which option accurately describes how FortiGate will handle these two routes to the same destination?

Q102. Examine the routing database shown in the exhibit, and then answer the following question:

Which of the following statements are correct? (Choose two.)

Q103. An administrator has configured two VLAN interfaces:

A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface.
However, the DHCP client cannot get a dynamic IP address from the DHCP server. What is the cause of the problem?

Q104. View the exhibit. Which of the following statements is true regarding the configuration settings?

Response:

Q105. Which Statements about virtual domains (VDOMs) arc true? (Choose two.)

Q106. Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?