Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 401:

  What information is synchronized between two FortiGate units that belong to the same HA cluster? (Choose three)

  A. IP addresses assigned to DHCP enabled interface.
  B. The master devices hostname.
  C. Routing configured and state.
  D. Reserved HA management interface IP configuration.
  E. Firewall policies and objects.
  A. IP addresses assigned to DHCP enabled interface.
  C. Routing configured and state.
  E. Firewall policies and objects.

• Question 402:

  Review the IKE debug output for IPsec shown in the exhibit below.

  

  Which statements is correct regarding this output?

  A. The output is a phase 1 negotiation.
  B. The output is a phase 2 negotiation.
  C. The output captures the dead peer detection messages.
  D. The output captures the dead gateway detection packets.
  C. The output captures the dead peer detection messages.

• Question 403:

  What logging options are supported on a FortiGate unit? (Choose two.)

  A. LDAP
  B. Syslog
  C. FortiAnalyzer
  D. SNMP
  B. Syslog
  C. FortiAnalyzer

• Question 404:

  Which statement best describes what a Fortinet System on a Chip (SoC) is?

  A. Low-power chip that provides general purpose processing power
  B. Chip that combines general purpose processing power with Fortinet's custom ASIC technology
  C. Light-version chip (with fewer features) of an SP processor
  D. Light-version chip (with fewer features) of a CP processor
  B. Chip that combines general purpose processing power with Fortinet's custom ASIC technology

• Question 405:

  View the Exhibit.

  

  Which statements are correct based on this output? (Choose two.)

  A. The global configuration is synchronized between the primary and secondary FortiGate.
  B. The all VDOM is not synchronized between the primary and secondary FortiGate.
  C. The root VDOM is not synchronized between the primary and secondary FortiGate.
  D. The FortiGates have three VDOMs.
  A. The global configuration is synchronized between the primary and secondary FortiGate.
  C. The root VDOM is not synchronized between the primary and secondary FortiGate.

• Question 406:

  Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

  A. The available actions for URL Filtering are Allow and Block.
  B. Multiple URL Filter lists can be added to a single Web filter profile.
  C. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.
  D. The available actions for URL Filtering are Allow, Block and Exempt.
  D. The available actions for URL Filtering are Allow, Block and Exempt.

• Question 407:

  Examine this log entry. What does the log indicate? (Choose three.)

  date=2013-12-04 time=09:30:18 logid=0100032001 type=event subtype=system level=information vd="root" user="admin" ui=http(192.168.1.112) action=login status=success reason=none profile="super_admin" msg="Administrator admin logged in successfully from http(192.168.1.112)"

  A. In the GUI, the log entry was located under "Log and Report > Event Log > User".
  B. In the GUI, the log entry was located under "Log and Report > Event Log > System".
  C. In the GUI, the log entry was located under "Log and Report > Traffic Log > Local Traffic".
  D. The connection was encrypted.
  E. The connection was unencrypted.
  F. The IP of the FortiGate interface that "admin" connected to was 192.168.1.112.
  G. The IP of the computer that "admin" connected from was 192.168.1.112.
  B. In the GUI, the log entry was located under "Log and Report > Event Log > System".
  E. The connection was unencrypted.

• Question 408:

  View the exhibit.

  

  When a user attempts to connect to an HTTPS site, what is the expected result with this configuration?

  A. The user is required to authenticate before accessing sites with untrusted SSL certificates.
  B. The user is presented with certificate warnings when connecting to sites that have untrusted SSL certificates.
  C. The user is allowed access all sites with untrusted SSL certificates, without certificate warnings.
  D. The user is blocked from connecting to sites that have untrusted SSL certificates (no exception provided).
  B. The user is presented with certificate warnings when connecting to sites that have untrusted SSL certificates.

• Question 409:

  You are creating a custom signature. Which has incorrect syntax?

  A. F-SBID(--attack_id 1842,--name "Ping.Death";--protocol icmp; --data_size>32000;)
  B. F-SBID(--name "Block.SMTP.VRFY.CMD";--pattern "vrfy";-- service SMTP; --no_case;-- context header;)
  C. F-SBID(--name "Ping.Death";--protocol icmp;--data_size>32000;)
  D. F-SBID(--name "Block".HTTP.POST"; --protocol tcp;-- service HTTP;-- flow from_client; -- pattern "POST"; -- context uri;--within 5,context;)
  A. F-SBID(--attack_id 1842,--name "Ping.Death";--protocol icmp; --data_size>32000;)

• Question 410:

  Data Leak Prevention archiving gives the ability to store files and message data onto a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)

  A. SNMP
  B. IPSec
  C. SMTP
  D. POP3
  E. HTTP
  C. SMTP
  D. POP3
  E. HTTP