Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 461:

  Which of the following methods can be used to access the CLI? (Select all that apply.)

  A. By using a direct connection to a serial console.

  B. By using the CLI console window in Web Config.

  C. By using an SSH connection.

  D. By using a Telnet connection.

  Correct Answer: ABCD

• Question 462:

  The command structure of the FortiGate CLI consists of commands, objects, branches, tables, and parameters. Which of the following items describes user?

  A. A command

  B. An object

  C. A table

  D. A parameter.

  Correct Answer: B

• Question 463:

  If a FortiGate unit has a dmz interface IP address of 210.192.168.2 with a subnet mask of 255.255.255.0, what is a valid dmz DHCP addressing range?

  A. 172.168.0.1 - 172.168.0.10

  B. 210.192.168.3 - 210.192.168.10

  C. 210.192.168.1 - 210.192.168.4

  D. All of the above.

  Correct Answer: B

• Question 464:

  A FortiGate unit can act as which of the following? (Select all that apply.)

  A. Antispam filter

  B. Firewall

  C. VPN gateway

  D. Mail relay

  E. Mail server

  Correct Answer: ABC

• Question 465:

  The Idle Timeout setting on a FortiGate unit applies to which of the following?

  A. Web browsing

  B. FTP connections

  C. User authentication

  D. Administrator access

  E. Web filtering overrides

  Correct Answer: D

• Question 466:

  Which of the following statements correctly describes how a FortiGate unit functions in Transparent mode?

  A. To manage the FortiGate unit, one of the interfaces must be designated as the management interface. This interface may not be used for forwarding data.

  B. An IP address is used to manage the FortiGate unit but this IP address is not associated with a specific interface.

  C. The FortiGate unit must use public IP addresses on the internal and external networks.

  D. The FortiGate unit uses private IP addresses on the internal network but hides them using address translation.

  Correct Answer: B

• Question 467:

  Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

  A. The FortiGate unit requires only a single IP address for receiving updates and configuring from a management computer.

  B. The FortiGate unit must use public IP addresses on both the internal and external networks.

  C. The FortiGate unit commonly uses private IP addresses on the internal network but hides them using network address translation.

  D. The FortiGate unit uses only DHCP-assigned IP addresses on the internal network.

  Correct Answer: C

• Question 468:

  Which of the following network protocols can be used to access a FortiGate unit as an administrator?

  A. HTTPS, HTTP, SSH, TELNET, PING, SNMP

  B. FTP, HTTPS, NNTP, TCP, WINS

  C. HTTP, NNTP, SMTP, DHCP

  D. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS

  E. Telnet, UDP, NNTP, SMTP

  Correct Answer: A

• Question 469:

  A FortiGate 60 unit is configured for your small office. The DMZ interface is connected to a network containing a web server and email server. The Internal interface is connected to a network containing 10 user workstations and the WAN1

  interface is connected to your ISP.

  You want to configure firewall policies so that your users can send and receive email messages to the email server on the DMZ network. You also want the email server to be able to retrieve email messages from an email server hosted by

  your ISP using the POP3 protocol.

  Which policies must be created for this communication? (Select all that apply.)

  A. Internal > DMZ

  B. DMZ > Internal

  C. Internal > WAN1

  D. WAN1 > Internal

  E. DMZ > WAN1

  F. WAN1 > DMZ

  Correct Answer: AE

• Question 470:

  Which of the following pieces of information can be included in the Destination Address field of a firewall policy?

  A. An IP address pool, a virtual IP address, an actual IP address, and an IP address group.

  B. A virtual IP address, an actual IP address, and an IP address group.

  C. An actual IP address and an IP address group.

  D. Only an actual IP address.

  Correct Answer: B