Online Access Free NSE4_FGT-6.2 Practice Test

Which of the following statements about NTLM authentication are correct? (Choose two.)

• A.NTLM-enabled web browsers are required.
• B.It is useful when users log in to DCs that are not monitored by a collector agent.
• C.It takes over as the primary authentication method when configured alongside FSSO.
• D.Multi-domain environments require DC agents on every domain controller.

Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)

• A.Extend timeout timers.
• B.Ensure all firewalls allow the FSSO required ports.
• C.Include the group of guest users in a policy.
• D.Guarantee at least 34 Kbps bandwidth between FortiGate and domain controllers.

View the exhibit.

Which of the following statements are correct? (Choose two.)

• A.This is a redundant IPsec setup.
• B.This setup requires at least two firewall policies with the action set to IPsec.
• C.Dead peer detection must be disabled to support this type of IPsec setup.
• D.The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

Which statement best describes the role of a DC agent in an FSSO DC agent mode solution?
Response:

• A.Captures the logon events and forwards them to the collector agent.
• B.Captures the logon and logoff events and forwards them to the collector agent.
• C.Captures the user IP address and workstation name and forwards them to FortiGate.
• D.Captures the logon events and forwards them to FortiGate.

An administrator has enabled the DHCP Server on the port1 interface and configured the following based on the exhibit.

Which statement is correct based on this configuration?
Response:

• A.The IP address 10.0.1.254 is reserves for the device with the MAC address 00:0c:29:29:38:da.
• B.00:0c:29:29:38:da is the virtual MAC address assigned to the secondary IP address (10.0.1.254) of the port1 interface.
• C.Access to the network is blocked for the devices with the MAC address 00:0c:29:29:38:da and the IP address 10.0.1.254.
• D.The MAC address 00:0c:29:29:38:da belongs to the port1 interface.