Online Access Free NSE4_FGT-6.4 Practice Test

An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

• A.Enable asymmetric routing at the interface level.
• B.Enable asymmetric routing, so the RPF check will be bypassed.
• C.Disable the RPF check at the FortiGate interface level for the source check.
• D.Disable the RPF check at the FortiGate interface level for the reply check.

Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

• A.TWAMP
• B.ping
• C.udp-echo
• D.DNS

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.Captive portal is enabled in the interface.
• B.The interface is a member of a zone.
• C.The operation mode is transparent.
• D.The interface is a member of a virtual wire pair.
• E.The interface has been configured for one-arm sniffer.

Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

• A.This security fabric topology is a logical topology view.
• B.Device detection is disabled on all FortiGate devices.
• C.There are 19 security recommendations for the security fabric.
• D.There are five devices that are part of the security fabric.

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
* All traffic must be routed through the primary tunnel when both tunnels are up
* The secondary tunnel must be used only if the primary tunnel goes down
* In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

• A.Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel.
• B.Enable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels.
• C.Enable Dead Peer Detection.
• D.Configure a high distance on the static route for the primary tunnel, and a lower distance on the static route for the secondary tunnel.