Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 451:

  What statement describes what DNS64 does?

  A. Converts DNS A record lookups to AAAA record lookups.
  B. Translates the destination IPv6 address of the DNS traffic to an IPv4 address.
  C. Synthesizes DNS AAAA records from A records.
  D. Translates the destination IPv4 address of the DNS traffic to an IPv6 address.
  B. Translates the destination IPv6 address of the DNS traffic to an IPv4 address.

• Question 452:

  Examine this output from a debug flow:

  

  Which statements about the output are correct? (Choose two.)

  A. The packet was allowed by the firewall policy with the ID 00007fc0.
  B. FortiGate routed the packet through port3.
  C. FortiGate received a TCP SYN/ACK packet.
  D. The source IP address of the packet was translated to 10.0.1.10.
  B. FortiGate routed the packet through port3.
  D. The source IP address of the packet was translated to 10.0.1.10.

• Question 453:

  A FortiGate interface is configured with the following commands:

  

  What statements about the configuration are correct? (Choose two.)

  A. IPv6 clients connected to port1 can use SLAAC to generate their IPv6 addresses.
  B. FortiGate can provide DNS settings to IPv6 clients.
  C. FortiGate can send IPv6 router advertisements (RAs.)
  D. FortiGate can provide IPv6 addresses to DHCPv6 client.
  A. IPv6 clients connected to port1 can use SLAAC to generate their IPv6 addresses.
  C. FortiGate can send IPv6 router advertisements (RAs.)

• Question 454:

  What advantages are there in using a fully Meshed IPSec VPN configuration instead of a hub and spoke set of IPSec tunnels?

  A. Using a hub and spoke topology is required to achieve full redundancy.
  B. Using a full mesh topology simplifies configuration.
  C. Using a full mesh topology provides stronger encryption.
  D. Full mesh topology is the most fault-tolerant configuration.
  D. Full mesh topology is the most fault-tolerant configuration.

• Question 455:

  Which of the following is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying the FortiGate unit?

  A. Packet encryption
  B. MIB-based report uploads
  C. SNMP access limits through access lists
  D. Running SNMP service on a non-standard port is possible
  A. Packet encryption

• Question 456:

  Which is the following statement are true regarding application control? (choose two)

  A. Application control is based on TCP destination port numbers.
  B. Application control is proxy based.
  C. Encrypted traffic can be identified by application control.
  D. Traffic Shaping can be applied to the detected application traffic.
  C. Encrypted traffic can be identified by application control.
  D. Traffic Shaping can be applied to the detected application traffic.

• Question 457:

  Which of the following Regular Expression patterns will make the term "bad language" case insensitive?

  A. [bad language]
  B. /bad language/i
  C. i/bad language/
  D. "bad language"
  E. /bad language/c
  B. /bad language/i

• Question 458:

  You are tasked to architect a new IPsec deployment with the following criteria:

  -

  There are two HQ sites that all satellite offices must connect to.

  -

  The satellite offices do not need to communicate directly with other satellite offices.

  -No dynamic routing will be used.

  - The design should minimize the number of tunnels being configured.

  Which topology should be used to satisfy all of the requirements?

  A. Redundant
  B. Hub-and-spoke
  C. Partial mesh
  D. Fully meshed
  B. Hub-and-spoke

• Question 459:

  What is longest length of time allowed on a FortiGate device for the virus scan to complete?

  A. 20 seconds
  B. 30 seconds
  C. 45 seconds
  D. 10 seconds
  B. 30 seconds

• Question 460:

  Examine the static route configuration shown below; then answer the question following it. (Choose two.)

  

  Which of the following statements correctly describes the static routing configuration provided? (Choose two.)

  A. All traffic to 172.20.1.0/24 is dropped by the FortiGate.
  B. As long as port1 is up, all traffic to 172.20.1.0/24 is routed by the static route number 1. If the interface port1 is down, the traffic is routed using the blackhole route.
  C. The FortiGate unit does NOT create a session entry in the session table when the traffic is being routed by the blackhole route.
  D. The FortiGate unit creates a session entry in the session table when the traffic is being routed by the blackhole route.
  A. All traffic to 172.20.1.0/24 is dropped by the FortiGate.
  C. The FortiGate unit does NOT create a session entry in the session table when the traffic is being routed by the blackhole route.