Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 231:

  What is the purpose of the Policy Lookup feature?

  A. It searches the matching policy based on an input criteria.
  B. It enables hidden security profiles with full logging capabilities and generates Learning Reports based on an input criteria.
  C. It finds duplicate objects in firewall policies.
  D. It creates a new firewall policy based on an input criteria.
  A. It searches the matching policy based on an input criteria.

• Question 232:

  What functions can the IPv6 Neighbor Discovery protocol accomplish? (Choose two.)

  A. Negotiate the encryption parameters to use.
  B. Auto-adjust the MTU setting.
  C. Autoconfigure addresses and prefixes.
  D. Determine other nodes reachability.
  C. Autoconfigure addresses and prefixes.
  D. Determine other nodes reachability.

• Question 233:

  Where are most of the security events logged?

  A. Security log
  B. Forward Traffic log
  C. Event log
  D. Alert log
  E. Alert Monitoring Console
  C. Event log

• Question 234:

  A user logs into a SSL VPN portal and activates the tunnel mode.

  The administrator has enabled split tunneling. The exhibit shows the firewall policy configuration:

  

  Which static route is automatically added to the client's routing table when the tunnel mode is activated?

  A. A route to a destination subnet matching the Internal_Servers address object.
  B. A route to the destination subnet configured in the tunnel mode widget.
  C. A default route.
  D. A route to the destination subnet configured in the SSL VPN global settings.
  A. A route to a destination subnet matching the Internal_Servers address object.

• Question 235:

  Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

  A. The proxy will not allow a file to be transmitted in multiple streams simultaneously.
  B. The proxy sends the file to the server while simultaneously buffering it.
  C. If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client.
  D. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.
  A. The proxy will not allow a file to be transmitted in multiple streams simultaneously.

• Question 236:

  Which statement about data leak prevention (DLP) on a FortiGate is true?

  A. Traffic shaping can be applied to DLP sensors.
  B. It can be applied to a firewall policy in a flow-based VDOM.
  C. Files can be sent to FortiSandbox for detecting DLP threats.
  D. It can archive files and messages.
  D. It can archive files and messages.

• Question 237:

  Examine the following interface configuration on a FortiGate in transparent mode:

  

  Which statement about this configuration is correct?

  A. The FortiGate generates spanning tree BPDU frames.
  B. The FortiGate device forwards received spanning tree BPDU frames.
  C. The FortiGate can block an interface if a layer-2 loop is detected.
  D. Ethernet layer-2 loops are likely to occur.
  B. The FortiGate device forwards received spanning tree BPDU frames.

• Question 238:

  Which statements are correct regarding URL filtering on a FortiGate unit? (Choose two.)

  A. The allowed actions for URL filtering include allow, block, monitor and exempt.
  B. The allowed actions for URL filtering are Allow and Block only.
  C. URL filters may be based on patterns using simple text, wildcards and regular expressions.
  D. URL filters are based on simple text only and require an exact match.
  A. The allowed actions for URL filtering include allow, block, monitor and exempt.
  C. URL filters may be based on patterns using simple text, wildcards and regular expressions.

• Question 239:

  Which statements about high availability (HA) for FortiGates are true? (Choose two.)

  A. Virtual clustering can be configured between two FortiGate devices with multiple VDOM.
  B. Heartbeat interfaces are not required on the primary device.
  C. HA management interface settings are synchronized between cluster members.
  D. Sessions handled by UTM proxy cannot be synchronized.
  A. Virtual clustering can be configured between two FortiGate devices with multiple VDOM.
  C. HA management interface settings are synchronized between cluster members.

• Question 240:

  A client can establish a secure connection to a corporate network using SSL VPN in tunnel mode. Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.)

  A. Split tunneling can be enabled when using tunnel mode SSL VPN.
  B. Client software is required to be able to use a tunnel mode SSL VPN.
  C. Users attempting to create a tunnel mode SSL VPN connection must be authenticated by at least one SSL VPN policy.
  D. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.
  A. Split tunneling can be enabled when using tunnel mode SSL VPN.
  B. Client software is required to be able to use a tunnel mode SSL VPN.
  C. Users attempting to create a tunnel mode SSL VPN connection must be authenticated by at least one SSL VPN policy.
  D. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.