Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 271:

  For traffic that does match any configured firewall policy, what is the default action taken by the FortiGate?

  A. The traffic is allowed and no log is generated.
  B. The traffic is allowed and logged.
  C. The traffic is blocked and no log is generated.
  D. The traffic is blocked and logged.
  C. The traffic is blocked and no log is generated.

• Question 272:

  A FortiGate is configured with the 1.1.1.1/24 address on the wan2 interface and HTTPS Administrative Access, using the default tcp port, is enabled for that interface. Given the SSL VPN settings in the exhibit.

  

  Which of the following SSL VPN login portal URLs are valid? (Choose two.)

  A. http://1.1.1.1:443/Training
  B. https://1.1.1.1:443/STUDENTS
  C. https://1.1.1.1/login
  D. https://1.1.1.1/
  B. https://1.1.1.1:443/STUDENTS
  D. https://1.1.1.1/

• Question 273:

  Which of the following statements are true regarding WAN Link Load Balancing? (Choose two).

  A. There can be only one virtual WAN Link per VDOM.
  B. FortiGate can measure the quality of each link based on latency, jitter, or packets percentage.
  C. Link health checks can be performed over each link member if the virtual WAN interface.
  D. Distance and priority values are configured in each link member if the virtual WAN interface.
  A. There can be only one virtual WAN Link per VDOM.
  C. Link health checks can be performed over each link member if the virtual WAN interface.

• Question 274:

  Which of the following statements are correct regarding a master HA unit? (Choose two)

  A. There should be only one master unit is each HA virtual cluster.
  B. The Master synchronizes cluster configuration with slaves.
  C. Only the master has a reserved management HA interface.
  D. Heartbeat interfaces are not required on a master unit.
  A. There should be only one master unit is each HA virtual cluster.
  B. The Master synchronizes cluster configuration with slaves.

• Question 275:

  What types of troubleshooting can you do when uploading firmware? (Choose two.)

  A. Investigate corrupted firmware
  B. Investigate current runtime state
  C. Investigate damaged hardware
  D. Investigate configuration history
  A. Investigate corrupted firmware
  D. Investigate configuration history

• Question 276:

  What are the purposes of NAT traversal in IPsec? (Choose two.)

  A. To detect intermediary NAT devices in the tunnel path.
  B. To encapsulate ESP packets in UDP packets using port 4500.
  C. To force a new DH exchange with each phase 2 re-key
  D. To dynamically change phase 1 negotiation mode to Aggressive.
  A. To detect intermediary NAT devices in the tunnel path.
  B. To encapsulate ESP packets in UDP packets using port 4500.

• Question 277:

  How does FortiGate verify the login credentials of a remote LDAP user?

  A. FortiGate sends the user entered credentials to the LDAP server for authentication.
  B. FortiGate re-generates the algorithm based on the login credentials and compares it against the algorithm stored on the LDAP server.
  C. FortiGate queries its own database for credentials.
  D. FortiGate queries the LDAP server for credentials.
  A. FortiGate sends the user entered credentials to the LDAP server for authentication.

• Question 278:

  Which two web filtering inspection modes inspect the full URL? (Choose two.)

  A. DNS-based.
  B. Proxy-based.
  C. Flow-based.
  D. URL-based
  B. Proxy-based.
  C. Flow-based.

• Question 279:

  Examine the following spanning tree configuration on a FortiGate in transparent mode:

  

  Which statement is correct for the above configuration?

  A. The FortiGate participates in spanning tree.
  B. The FortiGate device forwards received spanning tree messages.
  C. Ethernet layer-2 loops are likely to occur.
  D. The FortiGate generates spanning tree BPDU frames.
  B. The FortiGate device forwards received spanning tree messages.

• Question 280:

  Which of the following products provides dedicated hardware to analyze log data from multiple FortiGate devices?

  A. FortiGate device
  B. FortiAnalyzer device
  C. FortiClient device
  D. FortiManager device
  E. FortiMail device
  F. FortiBridge device
  B. FortiAnalyzer device