Fortinet NSE4_FGT-6.0 Actual Free Exam Questions & Community Discussion

Exam Code/Number: NSE4_FGT-6.0
Exam Name/Title: Fortinet NSE 4 - FortiOS 6.0
Certification Provider: Fortinet
Corresponding Certification: Fortinet NSE 4

Exam Questions: 126
Updated On: May 31, 2026

Question #46

Examine the network diagram shown in the exhibit, and then answer the following question:

A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ensure both port1 and port3 links are used at the same time for all traffic destined for 172.20.2.0/24. Which of the following static routes will satisfy this requirement on FGT1? (Choose two.)

A. 172.20.2.0/24 (1/0) via 10.10.1.2, port1 [0/0]

B. 172.20.2.0/24 (25/0) via 10.10.3.2, port3 [5/0]

C. 172.20.2.0/24 (1/150) via 10.10.3.2, port3 [10/0]

D. 172.20.2.0/24 (1/150) via 10.30.3.2, port3 [10/0]

Discussion 0

Correct Answer: C,D Vote an answer

Question #47

View the exhibit.

Based on this output, which statements are correct? (Choose two.)

A. The FortiGate devices have three VDOMs.

B. The global configuration is synchronized between the primary and secondary FortiGate devices.

C. The root VDOM is not synchronized between the primary and secondary FortiGate devices.

D. The all VDOM is not synchronized between the primary and secondary FortiGate devices.

Discussion 0

Correct Answer: B,C Vote an answer

Question #48

How do you format the FortiGate flash disk?

A. Select the format boot device option from the BIOS menu.

B. Execute the CLI command execute formatlogdisk.

C. Load the hardware test (HQIP) image.

D. Load a debug FortiOS image.

Discussion 0

Correct Answer: A Vote an answer

Question #49

Refer to the following exhibit.

Why is FortiGate not blocking the test file over FTP download?

A. FortiGate needs to be operating in flow-based inspection mode in order to scan FTP traffic.

B. Deep-inspection must be enabled for FortiGate to fully scan FTP traffic.

C. The FortiSandbox signature database is required to successfully scan FTP traffic.

D. The proxy options profile needs to scan FTP traffic on a non-standard port.

Discussion 0

Correct Answer: D Vote an answer

Question #50

Which statement about DLP on FortiGate is true?

A. It can be applied to a firewall policy in a flow-based VDOM

B. Files can be sent to FortiSandbox for detecting DLP threats.

C. It can archive files and messages.

D. Traffic shaping can be applied to DLP sensors.

Discussion 0

Correct Answer: C Vote an answer

Question #51

If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

A. The Services field does not allow source NAT and destination NAT to be combined in the same policy.

B. The Services field does not allow multiple sources of traffic, to use multiple services, to connect to a single computer.

C. The Services field removes the requirement of creating multiple VIPs for different services.

D. The Services field is used when several VIPs need to be bundled into VIP groups.

Discussion 0

Correct Answer: C Vote an answer

Question #52

Which action can be applied to each filter in the application control profile?

A. Allow, monitor, block and learn

B. Allow, monitor, block, and quarantine

C. Allow, block, authenticate, and warning

D. Block, monitor, warning, and quarantine

Discussion 0

Correct Answer: B Vote an answer

Question #53

Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.

An administrator has configured the WINDOS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

A. The firewall policy is not using a full SSL inspection profile.

B. The HTTPS signatures have not been added to the sensor.

C. A DoS policy should be used, instead of an IPS sensor.

D. The IPS filter is missing the Protocol: HTTPS option.

E. A DoS policy should be used, instead of an IPS sensor.

Discussion 0

Correct Answer: A Vote an answer

Question #54

View the exhibit.

Why is the administrator getting the error shown in the exhibit?

A. The administrator admin does not have the privileges required to configure global settings.

B. The administrator must first enter the command edit global.

C. The global settings cannot be configured from the root VDOM context.

D. The command config system global does not exist in FortiGate.

Discussion 0

Correct Answer: C Vote an answer

Download Free Fortinet NSE4_FGT-6.0 Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet NSE4_FGT-6.0 exam.