Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 521:

  What information is synchronized between two FortiGate units that belong to the same HA cluster? (Choose three)

  A. IP addresses assigned to DHCP enabled interface.

  B. The master devices hostname.

  C. Routing configured and state.

  D. Reserved HA management interface IP configuration.

  E. Firewall policies and objects.

  Correct Answer: ACE

• Question 522:

  Which of the following statements are correct concerning the IPsec phase 1 and phase 2, shown in the exhibit? (choose two)

  

  A. The quick mode selector in the remote site must also be 0.0.0.0/0 for the source and destination addresses.

  B. Only remote peers with the peer ID 'fortinet' will be able to establish a VPN.

  C. The FortiGate device will automatically add a static route to the source quick mode selector address received from each remote VPN peer.

  D. The configuration will work only to establish FortiClient-to-FortiGate tunnels. A FortiGate tunnel requires a different configuration.

  Correct Answer: CD

• Question 523:

  Which does FortiToken use as input when generating a token code? (Choose two.)

  A. User password

  B. Time

  C. User name

  D. Seed

  Correct Answer: AD

• Question 524:

  What types of troubleshooting can you do when uploading firmware? (Choose two.)

  A. Investigate corrupted firmware

  B. Investigate current runtime state

  C. Investigate damaged hardware

  D. Investigate configuration history

  Correct Answer: AD

• Question 525:

  Which of the following FSSO modes must be used for Novell eDirectory networks?

  A. Agentless polling

  B. LDAP agent

  C. eDirectory agent

  D. DC agent

  Correct Answer: C

• Question 526:

  Examine the following log message attributes and select two correct statements from the list below. (Choose two.)

  hostname=www.youtube.com profiletype="Webfilter_Profile" profile="default" status="passthrough" msg="URL belongs to a category with warnings enabled"

  A. The traffic was blocked.

  B. The user failed authentication.

  C. The category action was set to warning.

  D. The website was allowed

  Correct Answer: CD

• Question 527:

  In FortiOS session table output, what are the two possible `proto_state' values for a UDP session? (Choose two.)

  A. 00

  B. 11

  C. 01

  D. 05

  Correct Answer: AC

• Question 528:

  Which of the following statements are true regarding traffic accelerated by an NP processor? (Choose two.)

  A. TCP SYN packets are always handled by the NP Processor

  B. The initial packets go to the NP Processor, where a decision is taken on if the session can be offloaded or not.

  C. Packets for a session termination are always handled by the CPU.

  D. The initial packets go to the CPU, where a decision is taken on if the session can be offloaded or not.

  Correct Answer: AD

• Question 529:

  Which of the following statements best describes how the collector agent learns that a user has logged off from the network?

  A. The workstation fails to reply to the polls frequently done by the collector agent.

  B. The DC agent captures the log off event from the event logs, which it forwards to the collector agent.

  C. The work station notifies the DC agent that the user has logged off.

  D. The collector agent gets the logoff events when polling the respective domain controller.

  Correct Answer: D

• Question 530:

  Which define device identification? (Choose two.)

  A. Device identification is enabled by default on all interfaces.

  B. Enabling a source device in a firewall policy enables device identification on the source interfaces of that policy.

  C. You cannot combine source user and source device in the same firewall policy.

  D. FortiClient can be used as an agent based device identification technique.

  E. Only agentless device identification techniques are supported.

  Correct Answer: BD