Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 141:

  Review the IPS sensor filter configuration shown in the exhibit

  

  Based on the information in the exhibit, which statements are correct regarding the filter? (Choose two.)

  A. It does not log attacks targeting Linux servers.

  B. It matches all traffic to Linux servers.

  C. Its action will block traffic matching these signatures.

  D. It only takes effect when the sensor is applied to a policy.

  Correct Answer: CD

• Question 142:

  Examine the following log message for IPS and identify the valid responses below. (Select all that apply.)

  

  A. The target is 192.168.3.168.

  B. The target is 192.168.3.170.

  C. The attack was detected and blocked.

  D. The attack was detected only.

  E. The attack was TCP based.

  Correct Answer: BD

• Question 143:

  Which IPsec mode includes the peer id information in the first packet?

  A. Main mode.

  B. Quick mode.

  C. Aggressive mode.

  D. IKEv2 mode.

  Correct Answer: C

• Question 144:

  Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

  A. VPN tunnels interconnect between every single location.

  B. VPN tunnels are not configured between every single location.

  C. Some locations are reached via a hub location.

  D. There are no hub locations in a partial mesh.

  Correct Answer: BC

• Question 145:

  Review the configuration for FortiClient IPsec shown in the exhibit.

  

  Which statement is correct regarding this configuration?

  A. The connecting VPN client will install a route to a destination corresponding to the student_internal address object.

  B. The connecting VPN client will install a default route.

  C. The connecting VPN client will install a route to the 172.20.1.[1-5] address range.

  D. The connecting VPN client will connect in web portal mode and no route will be installed.

  Correct Answer: A

• Question 146:

  Review the IPsec phase 1 configuration in the exhibit; then answer the question below.

  

  Which statements are correct regarding this configuration? (Choose two.)

  A. The remote gateway address on 10.200.3.1.

  B. The local IPsec interface address is 10.200.3.1.

  C. The local gateway IP is the address assigned to port1.

  D. The local gateway IP address is 10.200.3.1.

  Correct Answer: AC

• Question 147:

  Review the IPsec diagnostics output of the command diagnose vpn tunnel list shown in the exhibit below.

  

  Which statements are correct regarding this output? (Choose two.)

  A. The connecting client has been allocated address 172.20.1.1.

  B. In the Phase 1 settings, dead peer detection is enabled.

  C. The tunnel is idle.

  D. The connecting client has been allocated address 10.200.3.1.

  Correct Answer: AB

• Question 148:

  Review the IKE debug output for IPsec shown in the exhibit below.

  

  Which statements is correct regarding this output?

  A. The output is a phase 1 negotiation.

  B. The output is a phase 2 negotiation.

  C. The output captures the dead peer detection messages.

  D. The output captures the dead gateway detection packets.

  Correct Answer: C

• Question 149:

  Which statement is an advantage of using a hub and spoke IPsec VPN configuration instead of a fully-meshed set of IPsec tunnels?

  A. Using a hub and spoke topology provides full redundancy.

  B. Using a hub and spoke topology requires fewer tunnels.

  C. Using a hub and spoke topology uses stronger encryption protocols.

  D. Using a hub and spoke topology requires more routes.

  Correct Answer: B

• Question 150:

  Review the IPsec phase 2 configuration shown in the exhibit; then answer the question below.

  

  Which statements are correct regarding this configuration? (Choose two.).

  A. The Phase 2 will re-key even if there is no traffic.

  B. There will be a DH exchange for each re-key.

  C. The sequence number of ESP packets received from the peer will not be checked.

  D. Quick mode selectors will default to those used in the firewall policy.

  Correct Answer: AB