Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 241:

  Encrypted backup files provide which of the following benefits? (Select all that apply.)

  A. Integrity of the backup file is protected since it cannot be easily modified when encrypted.

  B. Prevents the backup file from becoming corrupted.

  C. Protects details of the device's configuration settings from being discovered while the backup file is in transit. For example, transferred to a data centers for system recovery.

  D. A copy of the encrypted backup file is automatically pushed to the FortiGuard Distribution Service (FDS) for disaster recovery purposes. If the backup file becomes corrupt it can be retrieved through FDS.

  E. Fortinet Technical Support can recover forgotten passwords with a backdoor passphrase.

  Correct Answer: AC

• Question 242:

  Which of the following options can you use to update the virus definitions on a FortiGate unit? (Select all that apply.)

  A. Push update.

  B. Scheduled update

  C. Manual update

  D. FTP update

  Correct Answer: ABC

• Question 243:

  Which of the following statements are true of the FortiGate unit's factory default configuration?

  A. `Port1' or `Internal' interface will have an IP of 192.168.1.99.

  B. `Port1' or `Internal' interface will have a DHCP server set up and enabled (on devices that support DHCP Servers).

  C. Default login will always be the username: admin (all lowercase) and no password.

  D. The implicit firewall action is ACCEPT.

  Correct Answer: ABC

• Question 244:

  Under the System Information widget on the dashboard, which of the following actions are available for the system configuration? (Select all that apply.)

  A. Backup

  B. Restore

  C. Revisions

  D. Export

  Correct Answer: ABC

• Question 245:

  Which of the following network protocols are supported for administrative access to a FortiGate unit?

  A. HTTPS, HTTP, SSH, TELNET, PING, SNMP

  B. FTP, HTTPS, NNTP, TCP, WINS

  C. HTTP, NNTP, SMTP, DHCP

  D. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS

  E. Telnet, UDP, NNTP, SMTP

  Correct Answer: A

• Question 246:

  Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

  A. The FortiGate unit applies NAT to all traffic.

  B. The FortiGate unit functions as a Layer 3 device.

  C. The FortiGate unit functions as a Layer 2 device.

  D. The FortiGate unit functions as a router and the firewall function is disabled.

  Correct Answer: B

• Question 247:

  A FortiGate unit can provide which of the following capabilities? (Select all that apply.)

  A. Email filtering

  B. Firewall

  C. VPN gateway

  D. Mail relay

  E. Mail server

  Correct Answer: ABC

• Question 248:

  Which of the following methods can be used to access the CLI? (Select all that apply.)

  A. By using a direct connection to a serial console.

  B. By using the CLI console window in the GUI.

  C. By using an SSH connection.

  D. By using a Telnet connection.

  Correct Answer: ABCD

• Question 249:

  When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password. If the password is forgotten, the configuration file can still be restored using which of the following methods?

  A. Selecting the recover password option during the restore process.

  B. Having the password emailed to the administrative user by selecting the Forgot Password option.

  C. Sending the configuration file to Fortinet Support for decryption.

  D. If the password is forgotten, there is no way to use the file.

  Correct Answer: D

• Question 250:

  When creating administrative users which of the following configuration objects determines access rights on the FortiGate unit.

  A. profile

  B. allowaccess interface settings

  C. operation mode

  D. local-in policy

  Correct Answer: A