Sample Questions:-
Question : 1
Which of the following statements about central NAT are true? (Choose two.)
A.IP tool references must be removed from existing firewall policies before enabling central NAT.
B.Central NAT can be enabled or disabled from the CLI only.
C.Source NAT, using central NAT, requires at least one central SNAT policy.
D.Destination NAT, using central NAT, requires a VIP object as the destination address in firewall.
Answer: A,B
Question : 2
Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)
A.The firmware image must be manually uploaded to each FortiGate.
B.Only secondary FortiGate devices are rebooted.
C.Uninterruptable upgrade is enabled by default.
D.Traffic load balancing is temporally disabled while upgrading the firmware.
Answer: B,D
Question : 3
Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)
A.Include the group of guest users in a policy.
B.Extend timeout timers.
C.Guarantee at least 34 Kbps bandwidth between FortiGate and domain controllers.
D.Ensure all firewalls allow the FSSO required ports.
Answer: A,D
Question : 4
An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)
A.The interface has been configured for one-arm sniffer.
B.The interface is a member of a virtual wire pair.
C.The operation mode is transparent.
D.The interface is a member of a zone.
E.Captive portal is enabled in the interface.
Answer: A,B,C
Question : 5
When override is enabled, which of the following shows the process and selection criteria that are used to elect the primary FortiGate in an HA cluster?
A.Connected monitored ports > HA uptime > priority > serial number
B.Priority > Connected monitored ports > HA uptime > serial number
C.Connected monitored ports > priority > HA uptime > serial number
D.HA uptime > priority > Connected monitored ports > serial number
Answer: C
For More Information :-
Visit Now:-
I do it with dumpsforsure.com dumps. Important exam preparation material, no irregularities were found. I love the additional tips and tricks they offer for the final exam. I got NSE4_FGT-6.0 Dumps certification from the exam. And he achieved more than I expected. They compile the latest questions from the exam that's currently being audited. Thanks to dumpsforsure.com for being there and helping me achieve the certification I wanted for a long time.
ReplyDelete