Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 451:

  Which of the following statements are correct regarding Application Control?

  A. Application Control is based on the IPS engine.

  B. Application Control is based on the AV engine.

  C. Application Control can be applied to SSL encrypted traffic.

  D. Application Control cannot be applied to SSL encrypted traffic.

  Correct Answer: AC

• Question 452:

  Which of the following statements best describes the green status indicators that appear next to different FortiGuard Distribution Network services as illustrated in the exhibit?

  

  A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Network.

  B. They indicate that the FortiGate unit has the latest updates that are available from the FortiGuard Distribution Network.

  C. They indicate that updates are available and should be downloaded from the FortiGuard Distribution Network to the FortiGate unit.

  D. They indicate that the FortiGate unit is in the process of downloading updates from the FortiGuard Distribution Network.

  Correct Answer: A

• Question 453:

  Which of the following statements correctly describes how a push update from the FortiGuard Distribution Network (FDN) works?

  A. The FDN sends push updates only once.

  B. The FDN sends package updates automatically to the FortiGate unit without requiring an update request.

  C. The FDN continues to send push updates until the FortiGate unit sends an acknowledgement.

  D. The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update.

  Correct Answer: D

• Question 454:

  Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

  A. The proxy will not allow a file to be transmitted in multiple streams simultaneously.

  B. The proxy sends the file to the server while simultaneously buffering it.

  C. If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client.

  D. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.

  Correct Answer: A

• Question 455:

  Which part of an email message exchange is NOT inspected by the POP3 and IMAP proxies?

  A. TCP connection

  B. File attachments

  C. Message headers

  D. Message body

  Correct Answer: A

• Question 456:

  The FortiGate Web Config provides a link to update the firmware in the System > Status window.Clicking this link will perform which of the following actions?

  A. It will connect to the Fortinet support site where the appropriate firmware version can be selected.

  B. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.

  C. It will present a prompt to allow browsing to the location of the firmware file.

  D. It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit.

  Correct Answer: C

• Question 457:

  Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.

  An administrator must assign a set of UTM features to a group of users. Which of the following is the correct method for doing this?

  A. Enable a set of unique UTM features under "Edit User Group".

  B. The administrator must enable the UTM features in an identify-based policy applicable to the user group.

  C. When defining the UTM objects, the administrator must list the user groups which will use the UTM object.

  D. The administrator must apply the UTM features directly to a user object.

  Correct Answer: B

• Question 458:

  Because changing the operational mode to Transparent resets device (or vdom) to all defaults, which precautions should an Administrator take prior to performing this? (Select all that apply.)

  A. Backup the configuration.

  B. Disconnect redundant cables to ensure the topology will not contain layer 2 loops.

  C. Set the unit to factory defaults.

  D. Update IPS and AV files.

  Correct Answer: AB

• Question 459:

  The command structure of the CLI on a FortiGate unit consists of commands, objects, branches, tables and parameters. Which of the following items describes port1?

  A. A command

  B. An object

  C. A table

  D. A parameter

  Correct Answer: C

• Question 460:

  Which of the following components are contained in all FortiGate units from the FG50 models and up? (Select all that apply.)

  A. FortiASIC content processor.

  B. Hard Drive.

  C. Gigabit network interfaces.

  D. Serial console port.

  Correct Answer: AD