Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 311:

  Which of the following Fortinet products can receive updates from the FortiGuard Distribution Network? (Select all that apply.)

  A. FortiGate
  B. FortiClient
  C. FortiMail
  D. FortiAnalyzer
  A. FortiGate
  B. FortiClient
  C. FortiMail

• Question 312:

  Examine this PAC file configuration.

  

  Which of the following statements are true? (Choose two.)

  A. Browsers can be configured to retrieve this PAC file from the FortiGate.
  B. Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
  C. All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
  D. Any web request fortinet.com is allowed to bypass the proxy.
  A. Browsers can be configured to retrieve this PAC file from the FortiGate.
  D. Any web request fortinet.com is allowed to bypass the proxy.

• Question 313:

  Which statement best describes what SSL VPN Client Integrity Check does?

  A. Blocks SSL VPN connection attempts from users that has been blacklisted.
  B. Detects the Windows client security applications running in the SSL VPN client's PCs.
  C. Validates the SSL VPN user credential.
  D. Verifies which SSL VPN portal must be presented to each SSL VPN user.
  E. Verifies that the latest SSL VPN client is installed in the client's PC.
  B. Detects the Windows client security applications running in the SSL VPN client's PCs.

• Question 314:

  Which of the following email spam filtering features is NOT supported on a FortiGate unit?

  A. Multipurpose Internet Mail Extensions (MIME) Header Check
  B. HELO DNS Lookup
  C. Greylisting
  D. Banned Word
  C. Greylisting

• Question 315:

  The Idle Timeout setting on a FortiGate unit applies to which of the following?

  A. Web browsing
  B. FTP connections
  C. User authentication
  D. Administrator access
  E. Web filtering overrides
  D. Administrator access

• Question 316:

  Which statement about the firewall policy authentication timeout is true?

  A. It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this times expires.
  B. It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this times expires.
  C. It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the user's source MAC address.
  D. It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the user's source IP.
  D. It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the user's source IP.

• Question 317:

  The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process. Which of the following are valid authentication protocols that can be used when a user authenticates to the RADIUS server? (Select all that apply.)

  A. MS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2)
  B. PAP (Password Authentication Protocol)
  C. CHAP (Challenge-Handshake Authentication Protocol)
  D. MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1)
  E. FAP (FortiGate Authentication Protocol)
  A. MS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2)
  B. PAP (Password Authentication Protocol)
  C. CHAP (Challenge-Handshake Authentication Protocol)
  D. MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1)

• Question 318:

  Which of the following regular expression patterns make the terms "confidential data" case insensitive?

  A. [confidential data]
  B. /confidential data/i
  C. i/confidential data/
  D. "confidential data"
  B. /confidential data/i

• Question 319:

  The FortiGate port1 is connected to the Internet. The FortiGate port2 is connected to the internal network. Examine the firewall configuration shown in the exhibit; then answer the question below.

  

  Based on the firewall configuration illustrated in the exhibit, which statement is correct?

  A. A user that has not authenticated can access the Internet using any protocol that does not trigger an authentication challenge.
  B. A user that has not authenticated can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP.
  C. A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access all Internet services.
  D. DNS Internet access is always allowed, even for users that has not authenticated.
  D. DNS Internet access is always allowed, even for users that has not authenticated.

• Question 320:

  How is the FortiGate password recovery process?

  A. Interrupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry.
  B. Log in through the console port using the "maintainer" account within several seconds of physically power cycling the FortiGate.
  C. Hold down the CTRL + Esc (Escape) keys during reboot, then reset the admin password.
  D. Interrupt the boot sequence and restore a configuration file for which the password has been modified.
  B. Log in through the console port using the "maintainer" account within several seconds of physically power cycling the FortiGate.