Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 111:

  Which is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying a FortiGate unit?

  A. MIB-based report uploads.

  B. SNMP access limited by access lists.

  C. Packet encryption.

  D. Running SNMP service on a non-standard port is possible.

  Correct Answer: C

• Question 112:

  What logging options are supported on a FortiGate unit? (Choose two.)

  A. LDAP

  B. Syslog

  C. FortiAnalyzer

  D. SNMP

  Correct Answer: BC

• Question 113:

  Which network protocols are supported for administrative access to a FortiGate unit? (Choose three.)

  A. SNMP

  B. WINS

  C. HTTP

  D. Telnet

  E. SSH

  Correct Answer: CDE

• Question 114:

  What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)

  A. Conditional-forward.

  B. Forward-only.

  C. Non-recursive.

  D. Iterative.

  E. Recursive.

  Correct Answer: BCE

• Question 115:

  When creating FortiGate administrative users, which configuration objects specify the account rights?

  A. Remote access profiles.

  B. User groups.

  C. Administrator profiles.

  D. Local-in policies.

  Correct Answer: C

• Question 116:

  Which statements are true regarding the factory default configuration? (Choose three.)

  A. The default web filtering profile is applied to the first firewall policy.

  B. The `Port1' or `Internal' interface has the IP address 192.168.1.99.

  C. The implicit firewall policy action is ACCEPT.

  D. The `Port1' or `Internal' interface has a DHCP server set up and enabled (on device models that support DHCP servers).

  E. Default login uses the username: admin (all lowercase) and no password.

  Correct Answer: BDE

• Question 117:

  What methods can be used to access the FortiGate CLI? (Choose two.)

  A. Using SNMP.

  B. A direct connection to the serial console port.

  C. Using the CLI console widget in the GUI.

  D. Using RCP.

  Correct Answer: BC

• Question 118:

  What capabilities can a FortiGate provide? (Choose three.)

  A. Mail relay.

  B. Email filtering.

  C. Firewall.

  D. VPN gateway.

  E. Mail server.

  Correct Answer: BCD

• Question 119:

  Two FortiGate units with NP6 processors form an active-active cluster. The cluster is doing security profile (UTM) inspection over all the user traffic. What statements are true regarding the sessions that the master unit is offloading to the slave unit for inspection? (Choose two.)

  A. They are accelerated by hardware in the master unit.

  B. They are not accelerated by hardware in the master unit.

  C. They are accelerated by hardware in the slave unit.

  D. They are not accelerated by hardware in the slave unit.

  Correct Answer: AD

• Question 120:

  How is the FortiGate password recovery process?

  A. Interrupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry.

  B. Log in through the console port using the "maintainer" account within several seconds of physically power cycling the FortiGate.

  C. Hold down the CTRL + Esc (Escape) keys during reboot, then reset the admin password.

  D. Interrupt the boot sequence and restore a configuration file for which the password has been modified.

  Correct Answer: B