Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 491:

  Examine the exhibit.

  

  A client workstation is connected to FortiGate port2. The Fortigate port1 is connected to an ISP router. Port2 and port3 are both configured as a software switch. What IP address must be configured in the workstation as the default gateway?

  A. The port2's IP address.
  B. The router's IP address.
  C. The FortiGate's management IP address.
  D. The software switch interface's IP address.
  D. The software switch interface's IP address.

• Question 492:

  Which operating system vulnerability can you protect when selecting signatures to include in an IPS sensor? (Choose three)

  A. Irix
  B. QNIX
  C. Linux
  D. Mac OS
  E. BSD
  C. Linux
  D. Mac OS
  E. BSD

• Question 493:

  What are the ways FortiGate can monitor logs? (Choose three.)

  A. MIB
  B. SMS
  C. Alert Emails
  D. SNMP
  E. FortiAnalyzer
  F. Alert Message Console
  C. Alert Emails
  D. SNMP
  F. Alert Message Console

• Question 494:

  Which is true about incoming and outgoing interfaces in firewall policies?

  A. A physical interface may not be used.
  B. A zone may not be used.
  C. Multiple interfaces may not be used for both incoming and outgoing.
  D. Source and destination interfaces are mandatory.
  D. Source and destination interfaces are mandatory.

• Question 495:

  An administrator has enabled the DHCP Server on the port1 interface and configured the following based on the exhibit.

  

  Which statement is correct based on this configuration?

  A. The MAC address 00:0c:29:29:38:da belongs to the port1 interface.
  B. Access to the network is blocked for the devices with the MAC address 00:0c:29:29:38:da and the IP address 10.0.1.254.
  C. 00:0c:29:29:38:da is the virtual MAC address assigned to the secondary IP address (10.0.1.254) of the port1 interface.
  D. The IP address 10.0.1.254 is reserves for the device with the MAC address 00:0c:29:29:38:da.
  D. The IP address 10.0.1.254 is reserves for the device with the MAC address 00:0c:29:29:38:da.

• Question 496:

  What methods can be used to access the FortiGate CLI? (Choose two.)

  A. Using SNMP.
  B. A direct connection to the serial console port.
  C. Using the CLI console widget in the GUI.
  D. Using RCP.
  B. A direct connection to the serial console port.
  C. Using the CLI console widget in the GUI.

• Question 497:

  A FortiGate is operating in NAT/Route mode and configured with two virtual LAN (VLAN) sub-interfaces added to the same physical interface. Which statement about the VLAN IDs in this scenario is true?

  A. The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs.
  B. The two VLAN sub-interfaces must have different VLAN IDs.
  C. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in the same subnet.
  D. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.
  B. The two VLAN sub-interfaces must have different VLAN IDs.

• Question 498:

  Which of the following statements best describes what a Certificate Signing Request (CSR) is?

  A. A message sent by the Certificate Authority (CA) that contains a signed digital certificate.
  B. An enquiry submitted to a Certificate Authority (CA) to request a root CA certificate
  C. An enquiry submitted to a Certificate Authority (CA) to request a signed digital certificate
  D. An enquiry submitted to a Certificate Authority (CA) to request a Certificate Revocation List (CRL)
  B. An enquiry submitted to a Certificate Authority (CA) to request a root CA certificate

• Question 499:

  What methods can be used to deliver the token code to a user who is configured to use two-factor authentication? (Choose three.)

  A. Code blocks
  B. SMS phone message
  C. FortiToken
  D. Browser pop-up window
  E. Email
  B. SMS phone message
  C. FortiToken
  E. Email

• Question 500:

  In the Tunnel Mode widget of the web portal, the administrator has configured an IP Pool and enabled split tunneling. Which of the following statements is true about the IP address used by the SSL VPN client?

  A. The IP pool specified in the SSL-VPN Tunnel Mode Widget Options will override the IP address range defined in the SSL-VPN Settings.
  B. Because split tunneling is enabled, no IP address needs to be assigned for the SSL VPN tunnel to be established.
  C. The IP address range specified in SSL-VPN Settings will override the IP address range in the SSL-VPN Tunnel Mode Widget Options.
  A. The IP pool specified in the SSL-VPN Tunnel Mode Widget Options will override the IP address range defined in the SSL-VPN Settings.