← Back to exam page

Free NSE4-FGT-60 – Fortinet NSE4-FGT-60 Practice Test Question

Loading demo links...

Showing 10–12 of 13 questions

Question 10 (Topic 1)

Examine the network diagram shown in the exhibit, and then answer the following question: A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

Select an option, then click Submit answer.

  • ○ 172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0]
  • ○ 172.20.2.0/24 (25/0) via 10.10.3.2, port3 [5/0]
  • ○ 172.20.2.0/24 (1/150) via 10.10.3.2, port3 [10/0]
  • ○ 172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]
Question 11 (Topic 1)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Select an option, then click Submit answer.

  • ○ The firmware image must be manually uploaded to each FortiGate.
  • ○ Only secondary FortiGate devices are rebooted.
  • ○ Uninterruptable upgrade is enabled by default.
  • ○ Traffic load balancing is temporally disabled while upgrading the firmware.
Question 12 (Topic 1)

Which is a requirement for creating an inter-VDOM link between two VDOMs?

Select an option, then click Submit answer.

  • ○ The inspection mode of at least one VDOM must be proxy-based.
  • ○ At least one of the VDOMs must operate in NAT mode.
  • ○ The inspection mode of both VDOMs must match.
  • ○ Both VDOMs must operate in NAT mode.