Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 211:

  A new version of FortiOS firmware has just been released. When you upload new firmware, which is true?

  A. If you upload the firmware image via the boot loader's menu from a TFTP server, it will not preserve the configuration. But if you upload new firmware via the GUI or CLI, as long as you are following a supported upgrade path, FortiOS will attempt to convert the existing configuration to be valid with any new or changed syntax.
  B. No settings are preserved. You must completely reconfigure.
  C. No settings are preserved. After the upgrade, you must upload a configuration backup file. FortiOS will ignore any commands that are not valid in the new OS. In those cases, you must reconfigure settings that are not compatible with the new firmware.
  D. You must use FortiConverter to convert a backup configuration file into the syntax required by the new FortiOS, then upload it to FortiGate.
  A. If you upload the firmware image via the boot loader's menu from a TFTP server, it will not preserve the configuration. But if you upload new firmware via the GUI or CLI, as long as you are following a supported upgrade path, FortiOS will attempt to convert the existing configuration to be valid with any new or changed syntax.

• Question 212:

  How do application control signatures update on a FortiGate device?

  A. Through FortiGuard updates.
  B. Upgrade the FortiOS firmware to a newer release.
  C. By running the Application Control auto-learning feature.
  D. Signatures are hard coded to the device and cannot be updated.
  A. Through FortiGuard updates.

• Question 213:

  What are the valid sub-types for a Firewall type policy? (Select all that apply)

  A. Device Identity
  B. Address
  C. User Identity
  D. Schedule
  E. SSL VPN
  A. Device Identity
  B. Address
  C. User Identity

• Question 214:

  Which two statements are true regarding firewall policy disclaimers? (Choose two.)

  A. They cannot be used in combination with user authentication.
  B. They can only be applied to wireless interfaces.
  C. Users must accept the disclaimer to continue.
  D. The disclaimer page is customizable.
  C. Users must accept the disclaimer to continue.
  D. The disclaimer page is customizable.

• Question 215:

  Which of the following IKE modes is the one used during the IPsec phase 2 negotiation?

  A. Aggressive mode
  B. Quick mode
  C. Main mode
  D. Fast mode
  B. Quick mode

• Question 216:

  An administrator is using the FortiGate built-in sniffer to capture HTTP traffic between a client and a server, however, the sniffer output shows only the packets related with TCP session setups and disconnections. Why?

  A. The administrator is running the sniffer on the internal interface only.
  B. The filter used in the sniffer matches the traffic only in one direction.
  C. The FortiGate is doing content inspection.
  D. TCP traffic is being offloaded to an NP6.
  D. TCP traffic is being offloaded to an NP6.

• Question 217:

  FILL BLANK The___________ CLI command is used on the FortiGate unit to run static commands such as ping or to reset the FortiGate unit to factory defaults.

  Correct Answer. execute
  execute

• Question 218:

  You wish to create a firewall policy that applies only to traffic intended for your web server. The web server has an IP address of 192.168.2.2 and a /24 subnet mask. When defining the firewall address for use in this policy, which one of the following addresses is correct?

  A. 192.168.2.0 / 255.255.255.0
  B. 192.168.2.2 / 255.255.255.0
  C. 192.168.2.0 / 255.255.255.255
  D. 192.168.2.2 / 255.255.255.255
  D. 192.168.2.2 / 255.255.255.255

• Question 219:

  Which of the following methods can be used to access the CLI? (Select all that apply.)

  A. By using a direct connection to a serial console.
  B. By using the CLI console window in the GUI.
  C. By using an SSH connection.
  D. By using a Telnet connection.
  A. By using a direct connection to a serial console.
  B. By using the CLI console window in the GUI.
  C. By using an SSH connection.
  D. By using a Telnet connection.

• Question 220:

  Because changing the operational mode to Transparent resets device (or vdom) to all defaults, which precautions should an Administrator take prior to performing this? (Select all that apply.)

  A. Backup the configuration.
  B. Disconnect redundant cables to ensure the topology will not contain layer 2 loops.
  C. Set the unit to factory defaults.
  D. Update IPS and AV files.
  A. Backup the configuration.
  B. Disconnect redundant cables to ensure the topology will not contain layer 2 loops.