Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 301:

  A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit.

  

  Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data to the FortiAnalyzer unit?

  A. The FortiGate unit is considered an unregistered device.
  B. The FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the administrator.
  C. The FortiGate unit has insufficient privileges. The administrator should edit the device entry in the FortiAnalyzer and modify the privileges.
  D. The FortiGate unit is being treated as a syslog device and is only permitted to send log data.
  A. The FortiGate unit is considered an unregistered device.

• Question 302:

  Which statement about the IP authentication header (AH) used by IPsec is true?

  A. AH does not provide any data integrity or encryption.
  B. AH does not support perfect forward secrecy.
  C. AH provides data integrity but no encryption.
  D. AH provides strong data integrity but weak encryption.
  C. AH provides data integrity but no encryption.

• Question 303:

  Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides are correct? (Select all that apply.)

  A. A protection profile may have only one user group defined as an override group.
  B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
  C. Authentication to allow the override is based on a user's membership in a user group.
  D. Overrides can be allowed by the administrator for a specific period of time.
  B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
  C. Authentication to allow the override is based on a user's membership in a user group.
  D. Overrides can be allowed by the administrator for a specific period of time.

• Question 304:

  Which of the following report templates must be used when scheduling report generation?

  A. Layout Template
  B. Data Filter Template
  C. Output Template
  D. Chart Template
  A. Layout Template

• Question 305:

  Which statements about One-to-One IP pool are true? (Choose two.)

  A. It allows configuration of ARP replies.
  B. It allows fixed mapping of an internal address range to an external address range.
  C. It is used for destination NAT.
  D. It does not use port address translation.
  B. It allows fixed mapping of an internal address range to an external address range.
  D. It does not use port address translation.

• Question 306:

  Which of the following statements about web caching are true? (Choose two.)

  A. Web caching slows down web browsing due to constant read-write cycles from FortiGate memory.
  B. When a client makes a web request, the proxy checks if the requested URL is already in memory.
  C. Only heavy content is cached, for example, videos, images, audio and so on.
  D. Web caching is supported in both explicit and implicit proxy.
  B. When a client makes a web request, the proxy checks if the requested URL is already in memory.
  D. Web caching is supported in both explicit and implicit proxy.

• Question 307:

  Which of the following items are considered to be advantages of using the application control features on the FortiGate unit? Application control allows an administrator to:

  A. set a unique session-ttl for select applications.
  B. customize application types in a similar way to adding custom IPS signatures.
  C. check which applications are installed on workstations attempting to access the network.
  D. enable AV scanning per application rather than per policy.
  A. set a unique session-ttl for select applications.

• Question 308:

  The diag sys session list command is executed in the CLI. The output of this command is shown in the exhibit.

  

  Based on the output from this command, which of the following statements is correct?

  A. This is a UDP session.
  B. Traffic shaping is being applied to this session.
  C. This is an ICMP session.
  D. This traffic has been authenticated.
  E. This session matches a firewall policy with ID 5.
  B. Traffic shaping is being applied to this session.

• Question 309:

  Which of the following statements are correct regarding logging to memory on a FortiGate unit? (Select all that apply.)

  A. When the system has reached its capacity for log messages, the FortiGate unit will stop logging to memory.
  B. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.
  C. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.
  D. None of the above.
  B. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.
  C. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.

• Question 310:

  Which authentication methods does FortiGate support for firewall authentication? (Choose two.)

  A. Remote Authentication Dial in User Service (RADIUS)
  B. Lightweight Directory Access Protocol (LDAP)
  C. Local Password Authentication
  D. POP3
  E. Remote Password Authentication
  A. Remote Authentication Dial in User Service (RADIUS)
  C. Local Password Authentication