Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 91:

  Which of the following statements are correct regarding virtual domains (VDOMs)? (Select all that apply.)

  A. VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units.
  B. A management VDOM handles SNMP, logging, alert email, and FDN-based updates.
  C. VDOMs share firmware versions, as well as antivirus and IPS databases.
  D. Only administrative users with a 'super_admin' profile will be able to enter multiple VDOMs to make configuration changes.
  A. VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units.
  B. A management VDOM handles SNMP, logging, alert email, and FDN-based updates.
  C. VDOMs share firmware versions, as well as antivirus and IPS databases.

• Question 92:

  A FortiGate administrator with the super_admin profile configures a virtual domain (VDOM) for a new customer. After creating the VDOM, the administrator is unable to reassign the dmz interface to the new VDOM as the option is greyed out

  in the GUI in the management VDOM.

  What would be a possible cause for this problem?

  A. The administrator does not have the proper permissions to reassign the dmz interface.
  B. The dmz interface is referenced in the configuration of another VDOM.
  C. Non-management VDOMs cannot reference physical interfaces.
  D. The dmz interface is in PPPoE or DHCP mode.
  B. The dmz interface is referenced in the configuration of another VDOM.

• Question 93:

  Under the System Information widget on the dashboard, which of the following actions are available for the system configuration? (Select all that apply.)

  A. Backup
  B. Restore
  C. Revisions
  D. Export
  A. Backup
  B. Restore
  C. Revisions

• Question 94:

  Which of the following authentication types are supported by FortiGate units? (Select all that apply.)

  A. Kerberos
  B. LDAP
  C. RADIUS
  D. Local Users
  B. LDAP
  C. RADIUS
  D. Local Users

• Question 95:

  A FortiGate unit can scan for viruses on which types of network traffic? (Select all that apply.)

  A. POP3
  B. FTP
  C. SMTP
  D. SNMP
  E. NetBios
  A. POP3
  B. FTP
  C. SMTP

• Question 96:

  Review the IPsec diagnostics output of the command diagnose vpn tunnel list shown in the exhibit below.

  

  Which statements are correct regarding this output? (Choose two.)

  A. The connecting client has been allocated address 172.20.1.1.
  B. In the Phase 1 settings, dead peer detection is enabled.
  C. The tunnel is idle.
  D. The connecting client has been allocated address 10.200.3.1.
  A. The connecting client has been allocated address 172.20.1.1.
  B. In the Phase 1 settings, dead peer detection is enabled.

• Question 97:

  A FortiGate administrator configures a Virtual Domain (VDOM) for a new customer. After creating the VDOM, the administrator is unable to reassign the dmz interface to the new VDOM as the option is greyed out in Web Config in the

  management VDOM.

  What would be a possible cause for this problem?

  A. The dmz interface is referenced in the configuration of another VDOM.
  B. The administrator does not have the proper permissions to reassign the dmz interface.
  C. Non-management VDOMs can not reference physical interfaces.
  D. The dmz interface is in PPPoE or DHCP mode.
  E. Reassigning an interface to a different VDOM can only be done through the CLI.
  A. The dmz interface is referenced in the configuration of another VDOM.

• Question 98:

  An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network. Which of the following FortiAnalyzers will be detected? (Select all that apply.)

  A. 192.168.11.100
  B. 192.168.11.251
  C. 192.168.10.100
  D. 192.168.10.251
  A. 192.168.11.100
  B. 192.168.11.251

• Question 99:

  View the exhibit.

  

  Which of the following statements are correct? (Choose two.)

  A. next-hop IP address is not required when configuring a static route that uses the wan-load balance interface.
  B. Sessions will be load-balanced based on source and destination IP addresses.
  C. Each member interface requires its own firewall policy to allow traffic.
  D. The wan-load-balance interface must be manually created.
  A. next-hop IP address is not required when configuring a static route that uses the wan-load balance interface.
  B. Sessions will be load-balanced based on source and destination IP addresses.

• Question 100:

  Which of the following protocols are defined in the IPsec Standard? (Choose two)

  A. AH
  B. GRE
  C. SSL/TLS
  D. ESP
  A. AH
  D. ESP