Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 431:

  Regarding tunnel-mode SSL VPN, which three statements are correct? (Choose three.)

  A. Split tunneling is supported.
  B. It requires the installation of a VPN client.
  C. It requires the use of an Internet browser.
  D. It does not support traffic from third-party network applications.
  E. An SSL VPN IP address is dynamically assigned to the client by the FortiGate unit.
  A. Split tunneling is supported.
  B. It requires the installation of a VPN client.
  E. An SSL VPN IP address is dynamically assigned to the client by the FortiGate unit.

• Question 432:

  In transparent mode, forward-domain is a CLI setting associated with________.

  A. a static route.
  B. a firewall policy.
  C. an interface.
  D. a virtual domain.
  C. an interface.

• Question 433:

  Which of the following DLP actions will always be performed if it is selected?

  A. Archive
  B. Quarantine Interface
  C. Ban Sender
  D. Block
  E. None
  F. Ban
  G. Quarantine IP Address
  A. Archive

• Question 434:

  Which file names will match the *.tiff file name pattern configured in a data leak prevention filter? (Choose two.)

  A. tiff.tiff
  B. tiff.png
  C. tiff.jpeg
  D. gif.tiff
  A. tiff.tiff
  D. gif.tiff

• Question 435:

  Which of the following statements are true regarding the web filtering modes? (Choose two.)

  A. Proxy based mode allows for customizable block pages to display when sites are prevented.
  B. Proxy based mode requires more resources than flow-based.
  C. Flow based mode offers more settings under the advanced configuration section of the GUI.
  D. Proxy based mode offers higher throughput than flow-based mode.
  A. Proxy based mode allows for customizable block pages to display when sites are prevented.
  B. Proxy based mode requires more resources than flow-based.

• Question 436:

  Which of the following statements is correct regarding FortiGate interfaces and spanning tree protocol? (Choose Two)

  A. Only FortiGate switch interfaces Participate in spanning tree.
  B. All FortiGate interfaces in transparent mode VDOMs participate in spanning tree.
  C. All FortiGate interfaces in NAT/route mode VDOMs Participate in spanning tree.
  D. All FortiGate interfaces in transparent mode VDOMs may block or forward BPDUs.
  B. All FortiGate interfaces in transparent mode VDOMs participate in spanning tree.
  D. All FortiGate interfaces in transparent mode VDOMs may block or forward BPDUs.

• Question 437:

  Which statement best describes what the FortiGate hardware acceleration processors main task is?

  A. Offload traffic processing tasks from the main CPU.
  B. Offload management tasks from the main CPU.
  C. Compress and optimize the network traffic.
  D. Increase maximum bandwidth available in a FortiGate interface.
  A. Offload traffic processing tasks from the main CPU.

• Question 438:

  For data leak prevention, which statement describes the difference between the block and quarantine actions?

  A. A block action prevents the transaction. A quarantine action blocks all future transactions, regardless of the protocol.
  B. A block action prevents the transaction. A quarantine action archives the data.
  C. A block action has a finite duration. A quarantine action must be removed by an administrator.
  D. A block action is used for known users. A quarantine action is used for unknown users.
  A. A block action prevents the transaction. A quarantine action blocks all future transactions, regardless of the protocol.

• Question 439:

  Which of the following options best defines what Diffie-Hellman is?

  A. A symmetric encryption algorithm.
  B. A "key-agreement" protocol.
  C. A "Security-association-agreement" protocol.
  D. An authentication algorithm.
  B. A "key-agreement" protocol.

• Question 440:

  In a high availability cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a slave unit?

  A. Request: internal host; slave FortiGate; master FortiGate; Internet; web server.
  B. Request: internal host; slave FortiGate; Internet; web server.
  C. Request: internal host; slave FortiGate; master FortiGate; Internet; web server.
  D. Request: internal host; master FortiGate; slave FortiGate; Internet; web server.
  D. Request: internal host; master FortiGate; slave FortiGate; Internet; web server.