Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 361:

  Which of the following FSSO modes must be used for Novell eDirectory networks?

  A. Agentless polling
  B. LDAP agent
  C. eDirectory agent
  D. DC agent
  C. eDirectory agent

• Question 362:

  Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.

  

  Which of the following statements correctly describes the static routing configuration provided above?

  A. The FortiGate evenly shares the traffic to 172.20.168.0/24 through both routes.
  B. The FortiGate shares the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic.
  C. The FortiGate sends all the traffic to 172.20.168.0/24 through port1.
  D. Only the route that is using port1 will show up in the routing table.
  C. The FortiGate sends all the traffic to 172.20.168.0/24 through port1.

• Question 363:

  Which statements are true about offloading antivirus inspection to a Security Processor (SP)? (Choose two.)

  A. Both proxy-based and flow-based inspection are supported.
  B. A replacement message cannot be presented to users when a virus has been detected.
  C. It saves CPU resources.
  D. The ingress and egress interfaces can be in different SPs.
  B. A replacement message cannot be presented to users when a virus has been detected.
  C. It saves CPU resources.

• Question 364:

  What is the maximum number of FortiAnalyzer/FortiManager devices a FortiGate unit can be configured to send logs to?

  A. 1
  B. 2
  C. 3
  D. 4
  C. 3

• Question 365:

  Review the static route configuration for IPsec shown in the exhibit; then answer the question below.

  

  Which statements are correct regarding this configuration? (Choose two.)

  A. Interface remote is an IPsec interface.
  B. A gateway address is not required because the interface is a point-to-point connection.
  C. A gateway address is not required because the default route is used.
  D. Interface remote is a zone.
  A. Interface remote is an IPsec interface.
  B. A gateway address is not required because the interface is a point-to-point connection.

• Question 366:

  Which of the following statements are true regarding Local User Authentication? (Select all that apply.)

  A. Local user authentication is based on usernames and passwords stored locally on the FortiGate unit.
  B. Two-factor authentication can be enabled on a per user basis.
  C. Administrators can create an account for the user locally and specify the remote server to verify the password.
  D. Local users are for administration accounts only and cannot be used for identity policies.
  A. Local user authentication is based on usernames and passwords stored locally on the FortiGate unit.
  B. Two-factor authentication can be enabled on a per user basis.
  C. Administrators can create an account for the user locally and specify the remote server to verify the password.

• Question 367:

  In HA, the option Reserve Management Port for Cluster Member is selected as shown in the exhibit below.

  

  Which statements are correct regarding this setting? (Choose two.)

  A. Interface settings on port7 will not be synchronized with other cluster members.
  B. The IP address assigned to this interface must not overlap with the IP address subnet assigned to another interface.
  C. When connecting to port7 you always connect to the master device.
  D. A gateway address may be configured for port7.
  A. Interface settings on port7 will not be synchronized with other cluster members.
  D. A gateway address may be configured for port7.

• Question 368:

  The following diagnostic output is displayed in the CLI:

  

  Based on this output, which of the following statements is correct?

  A. Firewall policy 9 has endpoint compliance enabled but not firewall authentication.
  B. The client check that is part of an SSL VPN connection attempt failed.
  C. This user has been associated with a guest profile as evidenced by the group id of 0.
  D. An auth-keepalive value has been enabled.
  A. Firewall policy 9 has endpoint compliance enabled but not firewall authentication.

• Question 369:

  Caching improves performance by reducing FortiGate unit requests to the FortiGuard server. Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.)

  A. Caching is available for web filtering, antispam, and IPS requests.
  B. The cache uses a small portion of the FortiGate system memory.
  C. When the cache is full, the least recently used IP address or URL is deleted from the cache.
  D. An administrator can configure the number of seconds to store information in the cache before the FortiGate unit contacts the FortiGuard server again.
  E. The size of the cache will increase to accommodate any number of cached queries.
  B. The cache uses a small portion of the FortiGate system memory.
  C. When the cache is full, the least recently used IP address or URL is deleted from the cache.
  D. An administrator can configure the number of seconds to store information in the cache before the FortiGate unit contacts the FortiGuard server again.

• Question 370:

  Which of the following statements are correct about NTLM authentication? (Choose three)

  A. NTLM negotiation starts between the FortiGate device and the user's browser.
  B. It must be supported by the user's browser.
  C. It must be supported by the domain controllers.
  D. It does not require a collector agent.
  E. It does not require DC agents.
  A. NTLM negotiation starts between the FortiGate device and the user's browser.
  B. It must be supported by the user's browser.
  C. It must be supported by the domain controllers.