Fortinet NSE 4 – FortiOS 6.0 :Version : V9.02

1.You are configuring the root FortiGate to implement the security fabric. You are configuring port10 to communicate with a downstream FortiGate. View the default Edit Interface in the exhibit below: When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.) A. Device detection enabled. B. Administrative Access: FortiTelemetry. C. IP/Network Mask. D. Role: Security Fabric. 2.When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request? A. remote user’s public IP address B. The public IP address of the FortiGate device. C. The remote user’s virtual IP address. D. The internal IP address of the FotiGate device. 3.Examine this output from a debug flow: The safer , easier way to help you pass any IT exams. 3 / 45 Why did the FortiGate drop the packet? A. The next-hop IP address is unreachable. B. It failed the RPF check. C. It matched an explicitly configured firewall policy with the action DENY. D. It matched the default implicit firewall policy. 4.Examine the exhibit, which shows the output of a web filtering real time debug. Why is the site www.bing.com being blocked? A. The web site www.bing.com is categorized by FortiGuard as Malicious Websites. B. The user has not authenticated with the FortiGate yet. C. The web server IP address 204.79.197.200 is categorized by FortiGuard as Malicious Websites. D. The rating for the web site www.bing.com has been locally overridden to a category that is being blocked.