exam questions

Exam NSE4_FGT-6.0 All Questions

View all questions & answers for the NSE4_FGT-6.0 exam

Exam NSE4_FGT-6.0 topic 1 question 7 discussion

Actual exam question from Fortinet's NSE4_FGT-6.0
Question #: 7
Topic #: 1
[All NSE4_FGT-6.0 Questions]

An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)

  • A. Configure split tunneling for content inspection.
  • B. Configure host restrictions by IP or MAC address.
  • C. Configure two-factor authentication using security certificates.
  • D. Configure SSL offloading to a content processor (FortiASIC).
  • E. Configure a client integrity check (host-check).
Show Suggested Answer Hide Answer
Suggested Answer: CDE 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
mohdnjb
Highly Voted 5 years, 7 months ago
Correct Answers BCE
upvoted 10 times
...
romartinedg
Highly Voted 4 years, 7 months ago
B,C,E correctas, pag. 607, 608, 609 Fortigate_Security_6.2
upvoted 6 times
...
SebaAr22
Most Recent 4 years, 3 months ago
B - C - E
upvoted 1 times
...
farmez
4 years, 4 months ago
BCE correct answers checked on FGT > SSL VPN Settings: - Restrict Access -> Limit access to specific hosts - Requie Client Certificate > SSL VPN Portals - Host Check
upvoted 1 times
...
Levis
4 years, 12 months ago
BCE as per fortinet guide
upvoted 5 times
...
NetStef
5 years, 1 month ago
Correct answers are B,C,E
upvoted 5 times
...
montonearm
5 years, 2 months ago
must be BCE
upvoted 5 times
...
psat
5 years, 2 months ago
D is not the rigth option. what D does is " Hardware acceleration overview " Most FortiGate models have specialized acceleration hardware that can offload resource intensive processing from main processing (CPU) resources. Most FortiGate units include specialized content processors (CPs) that accelerate a wide range of important security processes such as virus scanning, attack detection, encryption and decryption. (Only selected entry-level FortiGate models do not include a CP processor.) Many FortiGate models also contain security processors (SPs) that accelerate processing for specific security features such as IPS and network processors (NPs) that offload processing of high volume network traffic.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago