Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 311:

  Which of the following actions can be used with the FortiGuard quota feature? (Choose three.)

  A. Allow

  B. Block

  C. Monitor

  D. Warning

  E. Authenticate

  Correct Answer: CDE

• Question 312:

  In a Crash log, what does a status of 0 indicate?

  A. Abnormal termination of a process

  B. A process closed for any reason

  C. Scanunitd process crashed

  D. Normal shutdown with no abnormalities

  E. DHCP process crashed

  Correct Answer: D

• Question 313:

  A FortiGate unit has multiple VDOMs in NAT/route mode with multiple VLAN interfaces in each VDOM. Which of the following statements is correct regarding the IP addresses assigned to each VLAN interface?

  A. Different VLANs can share the same IP address as long as they have different VLAN IDs.

  B. Different VLANs can share the same IP address as long as they are in different physical interface.

  C. Different VLANs can share the same IP address as long as they are in different VDOMs.

  D. Different VLANs can never share the same IP addresses.

  Correct Answer: C

• Question 314:

  In "diag debug flow" output, you see the message "Allowed by Policy-1: SNAT". Which is true?

  A. The packet matched the topmost policy in the list of firewall policies.

  B. The packet matched the firewall policy whose policy ID is 1.

  C. The packet matched a firewall policy, which allows the packet and skips UTM checks

  D. The policy allowed the packet and applied session NAT.

  Correct Answer: B

• Question 315:

  Which is not a FortiGate feature?

  A. Database auditing

  B. Intrusion prevention

  C. Web filtering

  D. Application control

  Correct Answer: A

• Question 316:

  What attributes are always included in a log header? (Choose three.)

  A. policyid

  B. level

  C. user

  D. time

  E. subtype

  F. duration

  Correct Answer: BDE

• Question 317:

  Which of the following statements best describes what a Certificate Signing Request (CSR) is?

  A. A message sent by the Certificate Authority (CA) that contains a signed digital certificate.

  B. An enquiry submitted to a Certificate Authority (CA) to request a root CA certificate

  C. An enquiry submitted to a Certificate Authority (CA) to request a signed digital certificate

  D. An enquiry submitted to a Certificate Authority (CA) to request a Certificate Revocation List (CRL)

  Correct Answer: B

• Question 318:

  Which of the following are possible actions for FortiGuard web category filtering? (Choose three.)

  A. Allow

  B. Block

  C. Exempt

  D. Warning

  E. Shape

  Correct Answer: ABD

• Question 319:

  Which best describes the mechanism of a TCP SYN flood?

  A. The attackers keeps open many connections with slow data transmission so that other clients cannot start new connections.

  B. The attackers sends a packets designed to sync with the FortiGate

  C. The attacker sends a specially crafted malformed packet, intended to crash the target by exploiting its parser.

  D. The attacker starts many connections, but never acknowledges to fully form them.

  Correct Answer: D

• Question 320:

  Which changes to IPS will reduce resource usage and improve performance? (Choose three)

  A. In custom signature, remove unnecessary keywords to reduce how far into the signature tree that FortiGate must compare in order to determine whether the packet matches.

  B. In IPS sensors, disable signatures and rate based statistics (anomaly detection) for protocols, applications and traffic directions that are not relevant.

  C. In IPS filters, switch from 'Advanced' to 'Basic' to apply only the most essential signatures.

  D. In firewall policies where IPS is not needed, disable IPS.

  E. In firewall policies where IPS is used, enable session start logs.

  Correct Answer: ABD