Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 381:

  Which of the following DLP actions will override any other action?

  A. Exempt

  B. Quarantine Interface

  C. Block

  D. None

  Correct Answer: A

• Question 382:

  A FortiClient fails to establish a VPN tunnel with a FortiGate unit.

  The following information is displayed in the FortiGate unit logs:

  

  Which of the following statements is a possible cause for the failure to establish the VPN tunnel?

  A. An IPSec DHCP server is not enabled on the external interface of the FortiGate unit.

  B. There is no IPSec firewall policy configured for the policy-based VPN.

  C. There is a mismatch between the FortiGate unit and the FortiClient IP addresses in the phase 2 settings.

  D. The phase 1 configuration on the FortiGate unit uses Aggressive mode while FortiClient uses Main mode.

  Correct Answer: A

• Question 383:

  The transfer of encrypted files or the use of encrypted protocols between users and servers on the internet can frustrate the efforts of administrators attempting to monitor traffic passing through the FortiGate unit and ensuring user compliance

  to corporate rules.

  Which of the following items will allow the administrator to control the transfer of encrypted data through the FortiGate unit? (Select all that apply.)

  A. Encrypted protocols can be scanned through the use of the SSL proxy.

  B. DLP rules can be used to block the transmission of encrypted files.

  C. Firewall authentication can be enabled in the firewall policy, preventing the use of encrypted communications channels.

  D. Application control can be used to monitor the use of encrypted protocols; alerts can be sent to the administrator through email when the use of encrypted protocols is attempted.

  Correct Answer: ABD

• Question 384:

  Based on the web filtering configuration illustrated in the exhibit,

  

  which one of the following statements is not a reasonable conclusion?

  A. Users can access both the www.google.com site and the www.fortinet.com site.

  B. When a user attempts to access the www.google.com site, the FortiGate unit will not perform web filtering on the content of that site.

  C. When a user attempts to access the www.fortinet.com site, any remaining web filtering will be bypassed.

  D. Downloaded content from www.google.com will be scanned for viruses if antivirus is enabled.

  Correct Answer: B

• Question 385:

  When viewing the Banned User monitor in Web Config, the administrator notes the entry illustrated in the exhibit.

  

  Which of the following statements is correct regarding this entry?

  A. The entry displays a ban that has been added as a result of traffic triggering a configured DLP rule.

  B. The entry displays a ban that was triggered by HTTP traffic matching an IPS signature. This client is banned from receiving or sending any traffic through the FortiGate.

  C. The entry displays a quarantine, which could have been added by either IPS or DLP.

  D. This entry displays a ban entry that was added manually by the administrator on June11th.

  Correct Answer: A

• Question 386:

  Which of the following features could be used by an administrator to block FTP uploads while still allowing FTP downloads?

  A. Anti-Virus File-Type Blocking

  B. Data Leak Prevention

  C. Network Admission Control

  D. FortiClient Check

  Correct Answer: B

• Question 387:

  A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit.

  

  Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data to the FortiAnalyzer unit?

  A. The FortiGate unit is considered an unregistered device.

  B. The FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the administrator.

  C. The FortiGate unit has insufficient privileges. The administrator should edit the device entry in the FortiAnalyzer and modify the privileges.

  D. The FortiGate unit is being treated as a syslog device and is only permitted to send log data.

  Correct Answer: A

• Question 388:

  A network administrator connects his PC to the INTERNAL interface on a FortiGate unit.

  The administrator attempts to make an HTTPS connection to the FortiGate unit on the VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity.

  The following troubleshooting commands are executed from the CLI:

  

  Based on the output from these commands, which of the following is a possible cause of the problem?

  A. The FortiGate unit has no route back to the PC.

  B. The PC has an IP address in the wrong subnet.

  C. The PC is using an incorrect default gateway IP address.

  D. There is no firewall policy allowing traffic from INTERNAL -> VLAN1.

  Correct Answer: D

• Question 389:

  Which of the following statements is correct about configuring web filtering overrides?

  A. The Override option for FortiGuard Web Filtering is available for any user group type.

  B. Admin overrides require an administrator to manually allow pending override requests which are listed in the Override Monitor.

  C. The Override Scopes of User and User Group are only for use when Firewall Policy Authentication is also being used.

  D. Using Web Filtering Overrides requires the use of Firewall Policy Authentication.

  Correct Answer: C

• Question 390:

  An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121. Users have been complaining that when

  downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message.

  Which of the following statements represents the best solution to this problem?

  A. Create a new session helper for the FTP service monitoring port 2121.

  B. Enable the ANY service in the firewall policies for both incoming and outgoing traffic.

  C. Place the client and server interface in the same zone and enable intra-zone traffic.

  D. Disable any protection profiles being applied to FTP traffic.

  Correct Answer: A