Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 131:

  Which Fortinet products and features could be considered part of a comprehensive solution to monitor and prevent the leakage of sensitive data? (Select all that apply.)

  A. Archive non-compliant outgoing e-mails using FortiMail.

  B. Restrict unofficial methods of transferring files such as P2P using Application Control lists on a FortiGate.

  C. Monitor database activity using FortiAnalyzer.

  D. Apply a DLP sensor to a firewall policy.

  E. Configure FortiClient to prevent files flagged as sensitive from being copied to a USB disk.

  Correct Answer: ABD

• Question 132:

  Bob wants to send Alice a file that is encrypted using public key cryptography.

  Which of the following statements is correct regarding the use of public key cryptography in this scenario?

  A. Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file.

  B. Bob will use his public key to encrypt the file and Alice will use Bob's private key to decrypt the file

  C. Bob will use Alice's public key to encrypt the file and Alice will use her private key to decrypt the file.

  D. Bob will use his public key to encrypt the file and Alice will use her private key to decrypt the file.

  Correct Answer: C

• Question 133:

  When the SSL proxy is NOT doing man-in-the-middle interception of SSL traffic, which certificate field can be used to determine the rating of a website?

  A. Organizational Unit.

  B. Common Name.

  C. Serial Number.

  D. Validity.

  Correct Answer: B

• Question 134:

  Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)

  A. The web client SSL handshake.

  B. The web server SSL handshake.

  C. File buffering.

  D. Communication with the URL filter process.

  Correct Answer: AB

• Question 135:

  Which statement is one disadvantage of using FSSO NetAPI polling mode over FSSO Security Event Log (WinSecLog) polling mode?

  A. It requires a DC agent installed in some of the Windows DC.

  B. It runs slower.

  C. It might miss some logon events.

  D. It requires access to a DNS server for workstation name resolution.

  Correct Answer: C

• Question 136:

  Which are two requirements for DC-agent mode FSSO to work properly in a Windows AD environment? (Choose two.)

  A. DNS server must properly resolve all workstation names.

  B. The remote registry service must be running in all workstations.

  C. The collector agent must be installed in one of the Windows domain controllers.

  D. A same user cannot be logged in into two different workstations at the same time.

  Correct Answer: AB

• Question 137:

  Which statement describes what the CLI command diagnose debug authd fsso list is used for

  A. Monitors communications between the FSSO collector agent and FortiGate unit.

  B. Displays which users are currently logged on using FSSO.

  C. Displays a listing of all connected FSSO collector agents.

  D. Lists all DC Agents installed on all domain controllers.

  Correct Answer: B

• Question 138:

  FSSO provides a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows active directory. Which of the following statements are correct regarding FSSO in a Windows domain environment when agent mode is used? (Choose two.)

  A. An FSSO collector agent must be installed on every domain controller.

  B. An FSSO domain controller agent must be installed on every domain controller.

  C. The FSSO domain controller agent will regularly update user logon information on the FortiGate unit.

  D. The FSSO collector agent will receive user logon information from the domain controller agent and will send it to the FortiGate unit.

  Correct Answer: BD

• Question 139:

  Which is the following statement are true regarding application control? (choose two)

  A. Application control is based on TCP destination port numbers.

  B. Application control is proxy based.

  C. Encrypted traffic can be identified by application control.

  D. Traffic Shaping can be applied to the detected application traffic.

  Correct Answer: CD

• Question 140:

  Identify the statement which correctly describes the output of the following command:

  diagnose ips anomaly list

  A. Lists the configured DoS policy.

  B. List the real-time counters for the configured DoS policy.

  C. Lists the errors captured when compiling the DoS policy.

  D. Lists the IPS signature matches.

  Correct Answer: B