Fortinet NSE4_FGT-6.0 Actual Free Exam Questions & Community Discussion

Exam Code/Number: NSE4_FGT-6.0
Exam Name/Title: Fortinet NSE 4 - FortiOS 6.0
Certification Provider: Fortinet
Corresponding Certification: Fortinet NSE 4

Exam Questions: 126
Updated On: May 31, 2026

Question #37

Which of the following conditions are required for establishing an IPSec VPN between two FortiGate devices?
(Choose two.)

A. If XAuth is enabled as a server in one peer, it must be enabled as a client in the other peer.

B. If the VPN is configured as route-based, there must be at least one firewall policy with the action set to IPSec.

C. If the VPN is configured as a policy-based in one peer, it must also be configured as policy-based in the other peer.

D. If the VPN is configured as DialUp User in one peer, it must be configured as either Static IP Address or Dynamic DNS in the other peer.

Discussion 0

Correct Answer: B,D Vote an answer

Question #38

Examine this FortiGate configuration:

Examine the output of the following debug command:

Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

A. It is allowed, but with no inspection

B. It is allowed and inspected as long as the inspection is flow based

C. It is dropped.

D. It is allowed and inspected, as long as the only inspection required is antivirus.

Discussion 0

Correct Answer: A Vote an answer

Question #39

Which statements about HA for FortiGate devices are true? (Choose two.)

A. Heartbeat interfaces are not required on the primary device.

B. Sessions handled by proxy-based security profiles cannot be synchronized.

C. Virtual clustering can be configured between two FortiGate devices that have multiple VDOMs.

D. HA management interface settings are synchronized between cluster members.

Discussion 0

Correct Answer: C,D Vote an answer

Question #40

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

A. Allow

B. Exempt

C. Learn

D. Warning

Discussion 0

Correct Answer: A,D Vote an answer

Question #41

The FSSO Collector Agent set to advanced access mode for the Windows Active Directory uses which of the following?

A. Windows convention - NetBios\Username

B. LDAP convention

C. NTLM convention

D. RSSO convention

Discussion 0

Correct Answer: B Vote an answer

Question #42

Which of the following features is supported by web filter in flow-based inspection mode with NGFW mode set to profile-based?

A. FortiGuard Quotas

B. Static URL

C. Search engines

D. Rating option

Discussion 0

Correct Answer: B Vote an answer

Question #43

Why must you use aggressive mode when a local FortiGate IPSec gateway hosts multiple dialup tunnels?

A. In aggressive mode, the remote peers are able to provide their peer IDs in the first message.

B. FortiGate is able to handle NATed connections only in aggressive mode.

C. Main mode does not support XAuth for user authentication.

D. FortiClient only supports aggressive mode.

Discussion 0

Correct Answer: A Vote an answer

Question #44

A team manager has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effective option to support this request?

A. Implement a web filter category override for the specified website.

B. Implement web filter authentication for the specified website

C. Implement web filter quotas for the specified website.

D. Implement DNS filter for the specified website.

Discussion 0

Correct Answer: A Vote an answer

Question #45

View the following exhibit, which shows the firewall policies and the object uses in the firewall policies.

The administrator is using the Policy Lookup feature and has entered the search create shown in the following exhibit.

Which of the following will be highlighted based on the input criteria?

A. Policy with ID 5.

B. Policies with ID 2 and 3.

C. Policy with ID 4.

D. Policy with ID1.

Discussion 0

Correct Answer: D Vote an answer

Download Free Fortinet NSE4_FGT-6.0 Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet NSE4_FGT-6.0 exam.