Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 251:

  View the exhibit.

  

  When Role is set to Undefined, which statement is true?

  A. The GUI provides all the configuration options available for the port1 interface.
  B. You cannot configure a static IP address for the port1 interface because it allows only DHCP addressing mode.
  C. Firewall policies can be created from only the port1 interface to any interface.
  D. The port1 interface is reserved for management only.
  A. The GUI provides all the configuration options available for the port1 interface.

• Question 252:

  If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does the FortiGate take?

  A. It blocks all future traffic for that IP address for a configured interval.
  B. It archives the data for that IP address.
  C. It provides a DLP block replacement page with a link to download the file.
  D. It notifies the administrator by sending an email.
  A. It blocks all future traffic for that IP address for a configured interval.

• Question 253:

  An administrator has configured a route-based IPsec VPN between two FortiGates. Which statement about this IPsec VPN configuration is true?

  A. A phase 2 configuration is not required.
  B. This VPN cannot be used as part of a hub and spoke topology.
  C. The IPsec firewall policies must be placed at the top of the list.
  D. A virtual IPsec interface is automatically created after the phase 1 configuration is completed.
  D. A virtual IPsec interface is automatically created after the phase 1 configuration is completed.

• Question 254:

  Review the CLI configuration below for an IPS sensor and identify the correct statements regarding this configuration from the choices below. (Select all that apply.)

  

  A. The sensor will log all server attacks for all operating systems.
  B. The sensor will include a PCAP file with a trace of the matching packets in the log message of any matched signature.
  C. The sensor will match all traffic from the address object `LINUX_SERVER'.
  D. The sensor will reset all connections that match these signatures.
  E. The sensor only filters which IPS signatures to apply to the selected firewall policy.
  B. The sensor will include a PCAP file with a trace of the matching packets in the log message of any matched signature.
  E. The sensor only filters which IPS signatures to apply to the selected firewall policy.

• Question 255:

  What inspections are executed by the IPS engine? (Choose three.)

  A. Application control
  B. Flow-based data leak prevention
  C. Proxy-based antispam
  D. Flow-based web filtering
  E. Proxy-based antivirus
  A. Application control
  B. Flow-based data leak prevention
  D. Flow-based web filtering

• Question 256:

  An administrator is examining the attack logs and notices the following entry:

  

  Based solely upon this log message, which of the following statements is correct?

  A. This attack was blocked by the HTTP protocol decoder.
  B. This attack was caught by the DoS sensor "protect-servers".
  C. This attack was launched against the FortiGate unit itself rather than a host behind the FortiGate unit.
  D. The number of concurrent connections to destination IP address 64.64.64.64 has exceeded the configured threshold.
  B. This attack was caught by the DoS sensor "protect-servers".

• Question 257:

  Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

  A. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
  B. ADVPN is only supported with IKEv2.
  C. Tunnels are negotiated dynamically between spokes.
  D. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.
  A. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
  C. Tunnels are negotiated dynamically between spokes.

• Question 258:

  Which of the following statements best describe the main requirements for a traffic session to be offload eligible to an NP6 processor? (Choose three.)

  A. Session packets do NOT have an 802.1Q VLAN tag.
  B. It is NOT multicast traffic.
  C. It does NOT require proxy-based inspection.
  D. Layer 4 protocol must be UDP, TCP, SCTP or ICMP.
  E. It does NOT require flow-based inspection.
  C. It does NOT require proxy-based inspection.
  D. Layer 4 protocol must be UDP, TCP, SCTP or ICMP.
  E. It does NOT require flow-based inspection.

• Question 259:

  What attributes are always included in a log header? (Choose three.)

  A. policyid
  B. level
  C. user
  D. time
  E. subtype
  F. duration
  B. level
  D. time
  E. subtype

• Question 260:

  An administrator has configured a dialup IPsec VPN with XAuth. Which method statement best describes this scenario?

  A. Only digital certificates will be accepted as an authentication method in phase 1.
  B. Dialup clients must provide a username and password for authentication.
  C. Phase 1 negotiations will skip pre-shared key exchange.
  D. Dialup clients must provide their local ID during phase 2 negotiations.
  B. Dialup clients must provide a username and password for authentication.