Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 281:

  Which of the following statements correctly describes how a FortiGate unit functions in Transparent mode?

  A. To manage the FortiGate unit, one of the interfaces must be designated as the management interface. This interface may not be used for forwarding data.
  B. An IP address is used to manage the FortiGate unit but this IP address is not associated with a specific interface.
  C. The FortiGate unit must use public IP addresses on the internal and external networks.
  D. The FortiGate unit uses private IP addresses on the internal network but hides them using address translation.
  B. An IP address is used to manage the FortiGate unit but this IP address is not associated with a specific interface.

• Question 282:

  Review the IPsec phase 1 configuration in the exhibit; then answer the question below.

  

  Which statements are correct regarding this configuration? (Choose two.)

  A. The remote gateway address on 10.200.3.1.
  B. The local IPsec interface address is 10.200.3.1.
  C. The local gateway IP is the address assigned to port1.
  D. The local gateway IP address is 10.200.3.1.
  A. The remote gateway address on 10.200.3.1.
  C. The local gateway IP is the address assigned to port1.

• Question 283:

  In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

  A. Client > primary FortiGate> secondary FortiGate> primary FortiGate> web server.
  B. Client > secondary FortiGate> web server.
  C. Client >secondary FortiGate> primary FortiGate> web server.
  D. Client> primary FortiGate> secondary FortiGate> web server.
  D. Client> primary FortiGate> secondary FortiGate> web server.

• Question 284:

  What determines whether a log message is generated or not?

  A. Firewall policy setting
  B. Log Settings in the GUI
  C. 'config log' command in the CLI
  D. Syslog
  E. Webtrends
  A. Firewall policy setting

• Question 285:

  What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)

  A. Enable session pick-up.
  B. Only applies to connections handled by a proxy.
  C. Only applies to UDP and ICMP connections.
  D. Connections must not be handled by a proxy.
  A. Enable session pick-up.
  D. Connections must not be handled by a proxy.

• Question 286:

  Which statements about FortiGate inspection modes are true? (Choose two.)

  A. The default inspection mode is proxy based.
  B. Switching from proxy-based mode to flow-based, then back to proxy-based mode, will not result in the original configuration.
  C. Proxy-based inspection is not available in VDOMs operating in transparent mode.
  D. Flow-based profiles must be manually converted to proxy-based profiles before changing the inspection mode from flow based to proxy based.
  A. The default inspection mode is proxy based.
  C. Proxy-based inspection is not available in VDOMs operating in transparent mode.

• Question 287:

  SSL Proxy is used to decrypt the SSL-encrypted traffic. After decryption, where is the traffic buffered in preparation for content inspection?

  A. The file is buffered by the application proxy.
  B. The file is buffered by the SSL proxy.
  C. In the upload direction, the file is buffered by the SSL proxy. In the download direction, the file is buffered by the application proxy.
  D. No file buffering is needed since a stream-based scanning approach is used for SSL content inspection.
  A. The file is buffered by the application proxy.

• Question 288:

  The order of the firewall policies is important. Policies can be re-ordered from either the GUI or the CLI. Which CLI command is used to perform this function?

  A. set order
  B. edit policy
  C. reorder
  D. move
  D. move

• Question 289:

  In order to load-share traffic using multiple static routes, the routes must be configured with ...

  A. the same distance and same priority.
  B. the same distance and the same weight.
  C. the same distance but each of them must be assigned a unique priority.
  D. a distance equal to its desired weight for ECMP but all must have the same priority.
  A. the same distance and same priority.

• Question 290:

  In a FSSO agentless polling mode solution, where must the collector agent be?

  A. In any Windows server
  B. In any of the AD domain controllers
  C. In the master AD domain controller
  D. The FortiGate device polls the AD domain controllers
  D. The FortiGate device polls the AD domain controllers