Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 481:

  When the SSL proxy is NOT doing man-in-the-middle interception of SSL traffic, which certificate field can be used to determine the rating of a website?

  A. Organizational Unit.
  B. Common Name.
  C. Serial Number.
  D. Validity.
  B. Common Name.

• Question 482:

  Which of the following products can be installed on a computer running Windows XP to provide personal firewall protection, antivirus protection, web and mail filtering, spam filtering, and VPN functionality?

  A. FortiGate
  B. FortiAnalyzer
  C. FortiClient
  D. FortiManager
  E. FortiReporter
  C. FortiClient

• Question 483:

  Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.

  An administrator must assign a set of UTM features to a group of users. Which of the following is the correct method for doing this?

  A. Enable a set of unique UTM features under "Edit User Group".
  B. The administrator must enable the UTM features in an identify-based policy applicable to the user group.
  C. When defining the UTM objects, the administrator must list the user groups which will use the UTM object.
  D. The administrator must apply the UTM features directly to a user object.
  B. The administrator must enable the UTM features in an identify-based policy applicable to the user group.

• Question 484:

  A firewall policy has been configured such that traffic logging is disabled and a UTM function is enabled.

  In addition, the system setting `utm-incident-traffic-log' has been enabled. In which log will a UTM event message be stored?

  A. Traffic
  B. UTM
  C. System
  D. None
  A. Traffic

• Question 485:

  Which component of FortiOS performs application control inspection?

  A. Kernel
  B. Antivirus engine
  C. IPS engine
  D. Application control engine
  C. IPS engine

• Question 486:

  Which statement is correct regarding virus scanning on a FortiGate unit?

  A. Virus scanning is enabled by default.
  B. Fortinet customer support enables virus scanning remotely for you.
  C. Virus scanning must be enabled in a security profile, which must be applied to a firewall policy.
  D. Enabling virus scanning in a security profile enables virus protection for all traffic flowing through the FortiGate.
  C. Virus scanning must be enabled in a security profile, which must be applied to a firewall policy.

• Question 487:

  Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

  A. VPN tunnels interconnect between every single location.
  B. VPN tunnels are not configured between every single location.
  C. Some locations are reached via a hub location.
  D. There are no hub locations in a partial mesh.
  B. VPN tunnels are not configured between every single location.
  C. Some locations are reached via a hub location.

• Question 488:

  An administrator is configuring a DLP rule for FTP traffic. When adding the rule to a DLP sensor,

  

  the administrator notes that the Ban Sender action is not available (greyed-out), as shown in the exhibit. Which of the following is the best explanation for the Ban Sender action NOT being available?

  A. The Ban Sender action is never available for FTP traffic.
  B. The Ban Sender action needs to be enabled globally for FTP traffic on the FortiGate unit before configuring the sensor.
  C. Firewall policy authentication is required before the Ban Sender action becomes available.
  D. The Ban Sender action is only available for known domains. No domains have yet been added to the domain list.
  A. The Ban Sender action is never available for FTP traffic.

• Question 489:

  In transparent mode, forward-domain is an CLI setting associate with ___________.

  A. static route
  B. a firewall policy
  C. an interface
  D. a virtual domain
  C. an interface

• Question 490:

  Review the output of the command config router ospf shown in the Exhibit below; then answer the question following it.

  

  Which one of the following statements is correct regarding this output?

  A. OSPF Hello packets will only be sent on interfaces configured with the IP addresses 172.16.1.1 and 172.16.1.2.
  B. OSPF Hello packets will be sent on all interfaces of the FortiGate device.
  C. OSPF Hello packets will be sent on all interfaces configured with an address matching the 10.0.1.0/24 and 172.16.0.0/12 networks.
  D. OSPF Hello packets are not sent on point-to-point networks.
  C. OSPF Hello packets will be sent on all interfaces configured with an address matching the 10.0.1.0/24 and 172.16.0.0/12 networks.