Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 331:

  You are creating a custom signature. Which has incorrect syntax?

  A. F-SBID(--attack_id 1842,--name "Ping.Death";--protocol icmp; --data_size>32000;)

  B. F-SBID(--name "Block.SMTP.VRFY.CMD";--pattern "vrfy";-- service SMTP; --no_case;-- context header;)

  C. F-SBID(--name "Ping.Death";--protocol icmp;--data_size>32000;)

  D. F-SBID(--name "Block".HTTP.POST"; --protocol tcp;-- service HTTP;-- flow from_client; -- pattern "POST"; -- context uri;--within 5,context;)

  Correct Answer: A

• Question 332:

  What is not true of configuring disclaimers on the FortiGate?

  A. Disclaimers can be used in conjunction with captive portal.

  B. Disclaimers appear before users authenticate.

  C. Disclaimers can be bypassed through security exemption lists.

  D. Disclaimers must be accepted in order to continue to the authentication login or originally intended destination.

  Correct Answer: C

• Question 333:

  Which statement is correct concerning an IPsec VPN with the remote gateway setting configured as 'Dynamic DNS'?

  A. The FortiGate will accept IPsec VPN connection from any IP address.

  B. The FQDN resolution of the local FortiGate IP address where the VPN is terminated must be provided by a dynamic DNS provider.

  C. The FortiGate will Accept IPsec VPN connections only from IP addresses included on a dynamic DNS access list.

  D. The remote gateway IP address can change dynamically.

  Correct Answer: D

• Question 334:

  Which of the following statements are correct regarding a master HA unit? (Choose two)

  A. There should be only one master unit is each HA virtual cluster.

  B. The Master synchronizes cluster configuration with slaves.

  C. Only the master has a reserved management HA interface.

  D. Heartbeat interfaces are not required on a master unit.

  Correct Answer: AB

• Question 335:

  Which of the following authentication methods can be used for SSL VPN authentication? (Choose three.)

  A. Remote Password Authentication (RADIUS, LDAP)

  B. Two-Factor Authentication

  C. Local Password Authentication

  D. FSSO

  E. RSSO

  Correct Answer: ABC

• Question 336:

  What log type would indicate whether a VPN is going up or down?

  A. Event log

  B. Security log

  C. Forward log

  D. Syslog

  Correct Answer: A

• Question 337:

  Where are most of the security events logged?

  A. Security log

  B. Forward Traffic log

  C. Event log

  D. Alert log

  E. Alert Monitoring Console

  Correct Answer: C

• Question 338:

  Which commands are appropriate for investigating high CPU? (Choose two.)

  A. diag sys top

  B. diag hardware sysinfo mem

  C. diag debug flow

  D. get system performance status

  Correct Answer: AD

• Question 339:

  Which of the following statements are true regarding application control? (Choose two.)

  A. Application control is based on TCP destination port numbers.

  B. Application control is proxy based.

  C. Encrypted traffic can be identified by application control.

  D. Traffic shaping can be applied to the detected application traffic.

  Correct Answer: CD

• Question 340:

  Which of the following statements is true regarding the use of a PAC file to configure the web proxy settings in an Internet browser? (Choose two.)

  A. More than one proxy is supported.

  B. Can contain a list of destinations that will be exempt from the use of any proxy.

  C. Can contain a list of URLs that will be exempted from the FortiGate web filtering inspection.

  D. Can contain a list of users that will be exempted from the use of any proxy.

  Correct Answer: BC