Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 471:

  Which of the following IPsec configuration modes can be used for implementing L2TP- over- IPSec VPNs?

  A. Policy-based IPsec only.
  B. Route-based IPsec only.
  C. Both policy-based and route-based VPN.
  D. L2TP-over-IPSec is not supported by FortiGate devices.
  A. Policy-based IPsec only.

• Question 472:

  Which of the following authentication methods can be used for SSL VPN authentication? (Choose three.)

  A. Remote Password Authentication (RADIUS, LDAP)
  B. Two-Factor Authentication
  C. Local Password Authentication
  D. FSSO
  E. RSSO
  A. Remote Password Authentication (RADIUS, LDAP)
  B. Two-Factor Authentication
  C. Local Password Authentication

• Question 473:

  Which of the following DLP actions will override any other action?

  A. Exempt
  B. Quarantine Interface
  C. Block
  D. None
  A. Exempt

• Question 474:

  Which of the following statements are true when using Web Proxy Auto-discovery Protocol (WPAD) with the DHCP discovery method? (Choose two.)

  A. The browser sends a DHCPINFORM request to the DHCP server.
  B. The browser will need to be preconfigured with the DHCP server's IP address.
  C. The DHCP server provides the PAC file for download.
  D. If the DHCP method fails, browsers will try the DNS method.
  A. The browser sends a DHCPINFORM request to the DHCP server.
  D. If the DHCP method fails, browsers will try the DNS method.

• Question 475:

  In which order are firewall policies processed on a FortiGate unit?

  A. From top to down, according with their sequence number.
  B. From top to down, according with their policy ID number.
  C. Based on best match.
  D. Based on the priority value.
  A. From top to down, according with their sequence number.

• Question 476:

  Which of the following products is designed to manage multiple FortiGate devices?

  A. FortiGate device
  B. FortiAnalyzer device
  C. FortiClient device
  D. FortiManager device
  E. FortiMail device
  F. FortiBridge device
  D. FortiManager device

• Question 477:

  Which is not a FortiGate feature?

  A. Database auditing
  B. Intrusion prevention
  C. Web filtering
  D. Application control
  A. Database auditing

• Question 478:

  Which of the following settings and protocols can be used to provide secure and restrictive administrative access to FortiGate? (Choose three.)

  A. Trusted host
  B. HTTPS
  C. Trusted authentication
  D. SSH
  E. FortiTelemetry
  A. Trusted host
  B. HTTPS
  D. SSH

• Question 479:

  A static route is configured for a FortiGate unit from the CLI using the following commands:

  

  Which of the following conditions is NOT required for this static default route to be displayed in the FortiGate unit's routing table?

  A. The Administrative Status of the wan1 interface is displayed as Up.
  B. The Link Status of the wan1 interface is displayed as Up.
  C. All other default routes should have an equal or higher distance.
  D. You must disable DHCP client on that interface.
  D. You must disable DHCP client on that interface.

• Question 480:

  The default administrator profile that is assigned to the default "admin" user on a FortGate device is: _______________.

  A. trusted-admin
  B. super_admin
  C. super_user
  D. admin
  E. fortiner-root
  B. super_admin