Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 291:

  An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The tunnel will start up for a few seconds, then shut down. Which of the following statements best describes how to resolve this issue?

  A. This user does not have permission to enable tunnel mode. Make sure that the tunnel mode widget has been added to that user's web portal.
  B. This FortiGate unit may have multiple Internet connections. To avoid this problem, use the appropriate CLI command to bind the SSL VPN connection to the original incoming interface.
  C. Check the SSL adaptor on the host machine. If necessary, uninstall and reinstall the adaptor from the tunnel mode portal.
  D. Make sure that only Internet Explorer is used. All other browsers are unsupported.
  B. This FortiGate unit may have multiple Internet connections. To avoid this problem, use the appropriate CLI command to bind the SSL VPN connection to the original incoming interface.

• Question 292:

  Under what circumstance would you enable LEARN as the Action on a firewall policy?

  A. You want FortiGate to compile security feature activity from various security-related logs, such as virus and attack logs.
  B. You want FortiGate to monitor a specific security profile in a firewall policy, and provide recommendations for that profile.
  C. You want to capture data across all traffic and security vectors, and receive learning logs and a report with recommendations.
  D. You want FortiGate to automatically modify your firewall policies as it learns your networking behavior.
  C. You want to capture data across all traffic and security vectors, and receive learning logs and a report with recommendations.

• Question 293:

  Which of the following statements are true regarding DLP File Type Filtering? (Choose two.)

  A. Filters based on file extension
  B. Filters based on fingerprints
  C. Filters based on file content
  D. File types are hard coded in the FortiOS
  A. Filters based on file extension
  C. Filters based on file content

• Question 294:

  The FortiGate unit's GUI provides a link to update the firmware. Clicking this link will perform which of the following actions?

  A. It will connect to the Fortinet Support site where the appropriate firmware version can be selected.
  B. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.
  C. It will present a prompt to allow browsing to the location of the firmware file.
  D. It will automatically connect to the Fortinet Support site to download the most recent firmware version for the FortiGate unit.
  C. It will present a prompt to allow browsing to the location of the firmware file.

• Question 295:

  DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)

  A. SNMP
  B. IPSec
  C. SMTP
  D. POP3
  E. HTTP
  C. SMTP
  D. POP3
  E. HTTP

• Question 296:

  A FortiGate is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which are two reasons for this problem? (Choose two.)

  A. The FortiGate is connected to multiple ISPs.
  B. There is a NAT device between the FortiGate and the FortiGuard Distribution Network.
  C. The FortiGate is in Transparent mode.
  D. The external facing interface of the FortiGate is configured to get the IP address from a DHCP server.
  B. There is a NAT device between the FortiGate and the FortiGuard Distribution Network.
  D. The external facing interface of the FortiGate is configured to get the IP address from a DHCP server.

• Question 297:

  Two FortiGate units with NP6 processors form an active-active cluster. The cluster is doing security profile (UTM) inspection over all the user traffic. What statements are true regarding the sessions that the master unit is offloading to the slave unit for inspection? (Choose two.)

  A. They are accelerated by hardware in the master unit.
  B. They are not accelerated by hardware in the master unit.
  C. They are accelerated by hardware in the slave unit.
  D. They are not accelerated by hardware in the slave unit.
  A. They are accelerated by hardware in the master unit.
  D. They are not accelerated by hardware in the slave unit.

• Question 298:

  In Transparent Mode, forward-domain is an attribute of _______.

  A. an interface
  B. a firewall policy
  C. a static route
  D. a virtual domain
  A. an interface

• Question 299:

  A network administrator connects his PC to the INTERNAL interface on a FortiGate unit.

  The administrator attempts to make an HTTPS connection to the FortiGate unit on the VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity.

  The following troubleshooting commands are executed from the CLI:

  

  Based on the output from these commands, which of the following is a possible cause of the problem?

  A. The FortiGate unit has no route back to the PC.
  B. The PC has an IP address in the wrong subnet.
  C. The PC is using an incorrect default gateway IP address.
  D. There is no firewall policy allowing traffic from INTERNAL -> VLAN1.
  D. There is no firewall policy allowing traffic from INTERNAL -> VLAN1.

• Question 300:

  Which statements are correct regarding application control? (Choose two.)

  A. It is based on the IPS engine.
  B. It is based on the AV engine.
  C. It can be applied to SSL encrypted traffic.
  D. Application control cannot be applied to SSL encrypted traffic.
  A. It is based on the IPS engine.
  C. It can be applied to SSL encrypted traffic.