Fortinet NSE4 - Test questions 2 with Complete & Verified Solutions | 100% Correct

Fortinet NSE4 - Test questions 2 with Complete & Verified Solutions | 100% Correct Which statements about a One-to-One IP pool are true? (choose two) - Answer ️️ -- It allows the fixed mapping of an internal address range to an external address rage. - It doesn't use port address translation. Which of the following FortiGate configuration tasks will create a route in the policy route table? (Choose two.) - Answer ️️ -- Static route created with a ISDB object - SD-WAN rule created to route traffic based on link latency. (FortiGate Infrastructure 6.2 Study Guide page 13) A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups. What is required in the SSL VPN configuration to meet these requirements? - Answer ️️ -Different SSL VPN realms for each group. What are the best practice to strengthen the security of SSL VPN access? - Answer ️️ -- Config host restriction by IP or MAC address - Config 2 factor auth using security certificates - Config a client integrity check (host check) Which statement about FortiGuard services for FortiGate is true? - Answer ️️ -Antivirus signatures are downloaded locally on FortiGate. Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.) - Answer ️️ -- Priority - Distance