Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 441:

  View the exhibit.

  

  What does the log message indicate? (Choose two.)

  A. The log type is utm.
  B. 10.0.1.10 is the IP address for mind-surf.net.
  C. FortiGate blocked the traffic.
  D. Firewall policy ID 6 matched the traffic.
  A. The log type is utm.
  C. FortiGate blocked the traffic.

• Question 442:

  An intermittent connectivity issue is noticed between two devices located behind the FortiGate dmz and internal interfaces. A continuous sniffer trace is run on the FortiGate unit that the administrator will convert into a .cap file for an off-line analysis with a sniffer application.

  

  Given the high volume of global traffic on the network, which of the following CLI commands will best allow the administrator to perform this troubleshooting operation?

  A. diagnose sniffer packet any
  B. diagnose sniffer packet dmz "" 3
  C. diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 3
  D. diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 4
  C. diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 3

• Question 443:

  In FortiOS session table output, what is the correct `proto_state' number for an established, non- proxied TCP connection?

  A. 00
  B. 11
  C. 01
  D. 05
  C. 01

• Question 444:

  View the exhibit.

  

  Which users and user groups are allowed access to the network through captive portal?

  A. Only individual users璶ot groups璬efined in the captive portal configuration.
  B. Groups defined in the captive portal configuration
  C. All users
  D. Users and groups defined in the firewall policy.
  A. Only individual users璶ot groups璬efined in the captive portal configuration.

• Question 445:

  How can a browser trust a web-server certificate signed by a third party CA?

  A. The browser must have the CA certificate that signed the web-server certificate installed.
  B. The browser must have the web-server certificate installed.
  C. The browser must have the private key of CA certificate that signed the web-browser certificate installed.
  D. The browser must have the public key of the web-server certificate installed.
  A. The browser must have the CA certificate that signed the web-server certificate installed.

• Question 446:

  Which answer best describes what an "Unknown Application" is?

  A. All traffic that matches the internal signature for unknown applications.
  B. Traffic that does not match the RFC pattern for its protocol.
  C. Any traffic that does not match an application control signature
  D. A packet that fails the CRC check.
  C. Any traffic that does not match an application control signature

• Question 447:

  Which of the following Session TTL values will take precedence?

  A. Session TTL specified at the system level for that port number
  B. Session TTL specified in the matching firewall policy
  C. Session TTL dictated by the application control list associated with the matching firewall policy
  D. The default session TTL specified at the system level
  C. Session TTL dictated by the application control list associated with the matching firewall policy

• Question 448:

  Examine the exhibit below; then answer the question following it.

  

  In this scenario, the FortiGate unit in Ottawa has the following routing table:

  

  Sniffer tests show that packets sent from the source IP address 172.20.168.2 to the destination IP address 172.20.169.2 are being dropped by the FortiGate located in Ottawa. Which of the following correctly describes the cause for the dropped packets?

  A. The forward policy check.
  B. The reverse path forwarding check.
  C. The subnet 172.20.169.0/24 is NOT in the Ottawa FortiGate's routing table.
  D. The destination workstation 172.20.169.2 does NOT have the subnet 172.20.168.0/24 in its routing table.
  B. The reverse path forwarding check.

• Question 449:

  Which of the following statements are characteristics of a FSSO solution using advanced access mode? (Choose three.)

  A. Protection profiles can be applied to both individual users and user groups
  B. Nested or inherited groups are supported
  C. Usernames follow the LDAP convention: CN=User, OU=Name, DC=Domain
  D. Usernames follow the Windows convention: Domain\username
  E. Protection profiles can be applied to user groups only.
  B. Nested or inherited groups are supported
  C. Usernames follow the LDAP convention: CN=User, OU=Name, DC=Domain
  E. Protection profiles can be applied to user groups only.

• Question 450:

  Review the output of the command get router info routing-table all shown in the Exhibit below; then answer the question following it.

  

  Which one of the following statements correctly describes this output?

  A. The two routes to the 10.0.2.0/24 subnet are ECMP routes and traffic will be load balanced based on the configured ECMP settings.
  B. The route to the 10.0.2.0/24 subnet via interface Remote_1 is the active and the route via Remote_2 is the backup.
  C. OSPF does not support ECMP therefore only the first route to subnet 10.0.1.0/24 is used.
  D. 172.16.2.1 is the preferred gateway for subnet 10.0.2.0/24.
  A. The two routes to the 10.0.2.0/24 subnet are ECMP routes and traffic will be load balanced based on the configured ECMP settings.