Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 321:

  Which of the following network protocols are supported for administrative access to a FortiGate unit?

  A. HTTPS, HTTP, SSH, TELNET, PING, SNMP
  B. FTP, HTTPS, NNTP, TCP, WINS
  C. HTTP, NNTP, SMTP, DHCP
  D. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS
  E. Telnet, UDP, NNTP, SMTP
  A. HTTPS, HTTP, SSH, TELNET, PING, SNMP

• Question 322:

  Which header field can be used in a firewall policy for traffic matching?

  A. ICMP type and code.
  B. DSCP.
  C. TCP window size.
  D. TCP sequence number.
  A. ICMP type and code.

• Question 323:

  What log type would indicate whether a VPN is going up or down?

  A. Event log
  B. Security log
  C. Forward log
  D. Syslog
  A. Event log

• Question 324:

  What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully- meshed set of IPSec tunnels? (Select all that apply.)

  A. Using a hub and spoke topology is required to achieve full redundancy.
  B. Using a hub and spoke topology simplifies configuration.
  C. Using a hub and spoke topology provides stronger encryption.
  D. Using a hub and spoke topology reduces the number of tunnels.
  B. Using a hub and spoke topology simplifies configuration.
  D. Using a hub and spoke topology reduces the number of tunnels.

• Question 325:

  Review the exhibit of an explicit proxy policy configuration. If there is a proxy connection attempt coming from the IP address 10.0.1.5, and from a user that has not authenticated yet, what action does the FortiGate proxy take?

  

  A. User is prompted to authenticate. Traffic from the user Student will be allowed by the policy #1. Traffic from any other user will be allowed by the policy #2.
  B. User is not prompted to authenticate. The connection is allowed by the proxy policy #2.
  C. User is not prompted to authenticate. The connection will be allowed by the proxy policy #1.
  D. User is prompted to authenticate. Only traffic from the user Student will be allowed. Traffic from any other user will be blocked.
  D. User is prompted to authenticate. Only traffic from the user Student will be allowed. Traffic from any other user will be blocked.

• Question 326:

  Which of the following statements correctly describes how a push update from the FortiGuard Distribution Network (FDN) works?

  A. The FDN sends push updates only once.
  B. The FDN sends package updates automatically to the FortiGate unit without requiring an update request.
  C. The FDN continues to send push updates until the FortiGate unit sends an acknowledgement.
  D. The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update.
  D. The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update.

• Question 327:

  Which of the following FSSO agents are required for a DC agent mode solution? (Choose two.)

  A. FSSO agent
  B. DC agent
  C. Collector agent
  D. Radius server
  B. DC agent
  C. Collector agent

• Question 328:

  Which of the following Fortinet hardware accelerators can be used to offload flow-based antivirus inspection? (Choose two.)

  A. SP3
  B. CP8
  C. NP4
  D. NP6
  A. SP3
  B. CP8

• Question 329:

  You are the administrator in charge of a FortiGate unit which acts as a VPN gateway.

  You have chosen to use Interface Mode when configuring the VPN tunnel and you want users from either side to be able to initiate new sessions.

  There is only 1 subnet at either end and the FortiGate unit already has a default route.

  Which of the following configuration steps are required to achieve these objectives? (Select all that apply.)

  A. Create one firewall policy.
  B. Create two firewall policies.
  C. Add a route for the remote subnet.
  D. Add a route for incoming traffic.
  E. Create a phase 1 definition.
  F. Create a phase 2 definition.
  B. Create two firewall policies.
  C. Add a route for the remote subnet.
  E. Create a phase 1 definition.
  F. Create a phase 2 definition.

• Question 330:

  A FortiGate has multiple VDOMs. Which statement about an administrator account configured with the default prof_admin profile is true?

  A. It can upgrade the firmware on the FortiGate.
  B. It can create administrator accounts with access to the same VDOM
  C. It can reset the password for the admin account.
  D. It cannot have access to more than one VDOM.
  A. It can upgrade the firmware on the FortiGate.