← Back to exam page

Free NSE4-FGT-62 – Fortinet NSE4-FGT-62 Practice Test Question

Loading demo links...

Showing 4–6 of 12 questions

Question 4 (Topic 1)

Which statement about the firewall policy authentication timeout is true?

Select an option, then click Submit answer.

  • ○ It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.
  • ○ It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.
  • ○ It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.
  • ○ It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.
Question 5 (Topic 1)

Which two statements correctly describe how FortiGate performs route lookup, when searching for a suitable gateway? (Choose two.)

Select an option, then click Submit answer.

  • ○ Lookup is done on the first packet from the session originator
  • ○ Lookup is done on the last packet sent from the responder
  • ○ Lookup is done on every packet, regardless of direction
  • ○ Lookup is done on the first reply packet from the responder
Question 6 (Topic 1)

Refer to the exhibit. The exhibit shows a FortiGate configuration. How does FortiGate handle web proxy traffic coming from the IP address 10.2.1.200, that requires authorization?

Select an option, then click Submit answer.

  • ○ It always authorizes the traffic without requiring authentication.
  • ○ It drops the traffic
  • ○ It authenticates the traffic using the authentication scheme SCHEME2.
  • ○ It authenticates the traffic using the authentication scheme SCHEME1.