FortiOS 5.6 NSE4_FGT-5.6 Practice Test Questions

1. Which of the following statements about advanced AD access mode for the FSSO collector agent are true? (Choose two.)

FortiGate can act as an LDAP client to configure the group filters.

It is only supported if DC agents are deployed.

It supports monitoring of nested groups.

It uses the Windows convention for naming; that is, Domain\Username.

2. Which of the following IPsec parameters is a phase 2 configuration setting?

Peer ID

eXtended Authentication (XAuth)

Quick mode selectors

Authentication method

3. Which of the following actions are available under the System Information widget for system configuration? (Choose two.)

Backup

Upload

Checkpoint

Configuration Recovery

Restore

4. Which of the following are differences between IPsec main mode and IPsec aggressive mode? (Choose two.)

Aggressive mode supports XAuth, while main mode does not.

Six packets are usually exchanged during main mode, while only three packets are exchanged during aggressive mode.

The first packet of aggressive mode contains the peer ID, while the first packet of main mode does not.

Main mode cannot be used for dialup VPNs, while aggressive mode can.

5. Which ways can FortiGate deliver one-time passwords (OTPs) to two-factor authentication users in your network? (Choose three.)

Hardware FortiToken

Web portal

SMS

USB FortiToken

FortiToken Mobile

6. Which file names will match the *.tiff file name pattern configured in a DLP filter? (Choose two.)

tiff.jpeg

tiff.tiff

gif.tiff

tiff.png

7. An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to SSL VPN. How can this be achieved?

Disabling split tunneling

Configuring web bookmarks

Assigning public IP addresses to SSL VPN clients

Using web-only mode

8. What step is required to configure an SSL VPN to access to an internal server using port forward mode?

Configure the virtual IP addresses to be assigned to the SSL VPN users.

Install FortiClient SSL VPN client

Create a SSL VPN realm reserved for clients using port forward mode.

Configure the client application to forward IP traffic to a Java applet proxy.

9. Which of the following configuration settings are global settings? (Choose two.)

FortiGuard settings

HA settings

Firewall policies

Security profiles

10. An administrator wants to monitor their network for any probing attempts aimed to exploit existing vulnerabilities in their servers. What must they configure on their FortiGate to accomplish this? (Choose two.)

An application control profile and set all application signatures to monitor.

A DoS policy, and log all UDP and TCP scan attempts.

An IPS sensor to monitor all signatures applicable to the server.

A web application firewall profile to check protocol constraints.

FortiOS 5.6 NSE4_FGT-5.6 Practice Test Questions Online

Leave a Reply Cancel reply