Free Access Fortinet.NSE4_FGT-6.4.v2022-06-17.q143 Practice Test (Page 5)

Question 16

Refer to the exhibit.

Which contains a network diagram and routing table output.
The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?

A.The first packet sent from Student failed the RPF check.
This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.

B.The first reply packet for Student failed the RPF check.
This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

C.The first packet sent from Student failed the RPF check.
This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

D.The first reply packet for Student failed the RPF check.
This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.

Question 17

Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?

A.The session is a bidirectional UDP connection.

B.The session is a UDP unidirectional state.

C.The session is a bidirectional TCP connection.

D.The session is in TCP ESTABLISHED state.

Question 18

View the exhibit.

Which of the following statements are correct? (Choose two.)

A.This setup requires at least two firewall policies with the action set to IPsec.

B.Dead peer detection must be disabled to support this type of IPsec setup.

C.This is a redundant IPsec setup.

D.The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

Question 19

Examine the exhibit, which contains a virtual IP and firewall policy configuration.

The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

A.10.200.1.10

B.Any available IP address in the WAN (port1) subnet 10.200.1.0/24

C.10.200.1.1

D.10.0.1.254

Question 20

Refer to the exhibit.

According to the certificate values shown in the exhibit, which type of entity was the certificate issued to?

A.A user

B.A root CA

C.A subordinate

D.A bridge CA

Other Version: 4164Fortinet.NSE4_FGT-6.4.v2022-05-20.q136; 66Fortinet.Prepawayete.NSE4_FGT-6.4.v2021-09-15.by.cash.165q.pdf

Latest Upload: 240PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 335Nokia.4A0-113.v2026-05-01.q69; 346EC-COUNCIL.312-49v11.v2026-04-30.q214; 271Microsoft.MB-820.v2026-04-30.q101; 237Salesforce.MC-202.v2026-04-30.q57; 250BICSI.INSTC_V8.v2026-04-29.q53; 369NMLS.MLO.v2026-04-28.q82; 267NCARB.Project-Management.v2026-04-28.q27; 484EMC.D-AV-DY-23.v2026-04-27.q184; 1240ServiceNow.CSA.v2026-04-27.q483

Question 16

Question 17

Question 18

Question 19

Question 20

Download PDF File