NSE4_FGT-6.0 EXAM and solution

QUESTION 1 Which statement about FortiGuard services for FortiGate is true? A. The web filtering database is downloaded locally on FortiGate. B. Antivirus signatures are downloaded locally on FortiGate. C. FortiGate downloads IPS updates using UDP port 53 or 8888. D. FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates. QUESTION 2 Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.) A. Priority B. Metric C. Distance D. Cost QUESTION 3 Based on this output, which statements are correct? (Choose two.) A. The all VDOM is not synchronized between the primary and secondary FortiGate devices. B. The root VDOM is not synchronized between the primary and secondary FortiGate devices. C. The global configuration is synchronized between the primary and secondary FortiGate devices. D. The FortiGate devices have three VDOMs. QUESTION 4 Which statement is true regarding the policy ID number of a firewall policy? A. Defines the order in which rules are processed. B. Represents the number of objects used in the firewall policy. C. Required to modify a firewall policy using the CLI. D. Changes when firewall policies are reordered. QUESTION 5 An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose QUESTION 6 Which statement is true regarding SSL VPN timers? (Choose two.) A. Allow to mitigate DoS attacks from partial HTTP requests. B. SSL VPN settings do not have customizable timers. C. Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs. D. Prevent SSL VPN users from being logged out because of high network latency. QUESTION 7 Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA? A. The public key of the web server certificate must be installed on the browser. B. The web-server certificate must be installed on the browser. C. The CA certificate that signed the web-server certificate must be installed on the browser. D. The private key of the CA certificate that signed the browser certificate must be installed on the browser.