Free Access Fortinet.NSE4_FGT-6.4.v2022-06-17.q143 Practice Test (Page 11)

Question 46

An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

A.Denied users are blocked for 30 minutes.

B.Device detection on all interfaces is enforced for 30 minutes.

C.The number of logs generated by denied traffic is reduced.

D.A session for denied traffic is created.

Question 47

Which statement about the policy ID number of a firewall policy is true?
D18912E1457D5D1DDCBD40AB3BF70D5D

A.It changes when firewall policies are reordered.

B.It is required to modify a firewall policy using the CLI.

C.It represents the number of objects used in the firewall policy.

D.It defines the order in which rules are processed.

Question 48

Refer to theexhibits.

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they areunableto leavereactions on videos or other types ofposts.
Which part ofthe policy configuration must you change to resolve the issue?

A.The SSL inspection needs tobe a deep content inspection.

B.Additional application signatures arerequired to add to thesecurity policy.

C.Force access to Facebook using the HTTP service.

D.Add Facebook in the URL category in the security policy.

Question 49

Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)
https://www.fast2test.com/NSE4_FGT-6.4-practice-test.html 10
Valid Fast2test NSE4_FGT-6.4 Exam PDF Dumps - New NSE4_FGT-6.4 Real Exam Questions

A.Create a new service object for TELNET and set the maximum session TTL.

B.Set the maximum session TTL value for the TELNET service object.

C.Set the session TTL on the SSLVPN policy to maximum, so the idle session timeout will not happen after
90 minutes.

D.Create a new firewall policy and place it above the existing SSLVPN policy for the SSL VPN traffic, and set the new TELNET service object in the policy.

Question 50

Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

A.Customer VDOM

B.Global VDOM

C.FG-traffic VDOM

D.Root VDOM

Other Version: 4170Fortinet.NSE4_FGT-6.4.v2022-05-20.q136; 66Fortinet.Prepawayete.NSE4_FGT-6.4.v2021-09-15.by.cash.165q.pdf

Latest Upload: 247PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 361Nokia.4A0-113.v2026-05-01.q69; 395EC-COUNCIL.312-49v11.v2026-04-30.q214; 301Microsoft.MB-820.v2026-04-30.q101; 247Salesforce.MC-202.v2026-04-30.q57; 267BICSI.INSTC_V8.v2026-04-29.q53; 395NMLS.MLO.v2026-04-28.q82; 274NCARB.Project-Management.v2026-04-28.q27; 493EMC.D-AV-DY-23.v2026-04-27.q184; 1297ServiceNow.CSA.v2026-04-27.q483

Question 46

Question 47

Question 48

Question 49

Question 50

Download PDF File