Online Access Free NSE4_FGT_AD-7.6 Practice Test

An administrator manages a FortiGate model that supports NTurbo
How does NTurbo acceleration enhance antivirus performance?

• A.For flow-based inspection. NTurbo establishes a dedicated data path to redirect traffic between the IPS engine and FortiGate ingress and egress interfaces.
• B.For proxy-based inspection. NTurbo offloads traffic to the content processor.
• C.For proxy-based inspection. NTurbo buffers the whole file and then sends it to the antivirus engine.
• D.For flow-based inspection. NTurbo creates two inspection sessions on the FortiGate device.

Refer to the exhibit.

An SD-WAN zone configuration on the FortiGate GUI is shown. Based on the exhibit, which statement is true?

• A.The Underlay zone is the zone by default.
• B.The virtual-wan-link and overlay zones can be deleted
• C.port2 and port3 are not assigned to a zone.
• D.The Underlay zone contains no member.

Which two statements are true about an HA cluster? (Choose two answers)

• A.HA incremental synchronization includes FIB entries and IPsec SAs.
• B.An HA cluster cannot have both in-band and out-of-band management interfaces at the same time.
• C.When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2.
• D.Link failover triggers a failover if the administrator sets the interface down on the primary device.

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

• A.Extended authentication (XAuth) for faster authentication because fewer packets are exchanged
• B.Pre-shared key and certificate signature as authentication methods
• C.Extended authentication (XAuth) to request the remote peer to provide a username and password
• D.No certificate is required on the remote peer when you set the certificate signature as the authentication method

Refer to the exhibit
A firewall policy to enable active authentication is shown.

When attempting to access an external website using an active authentication method, the user is not presented with a login prompt. What is the most likely reason for this situation?

• A.No matching user account exists for this user.
• B.The Remote-users group must be set up correctly in the FSSO configuration.
• C.The Remote-users group is not added to the Destination
• D.The Service DNS is required in the firewall policy.