Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 531:

  A FortiGate devices is configured with four VDOMs: 'root' and 'vdom1' are in NAT/route mode; 'vdom2' and 'vdom2' are in transparent mode. The management VDOM is 'root'. Which of the following statements are true? (Choose two.)

  A. An inter-VDOM link between 'root' and 'vdom1' can be created.

  B. An inter-VDOM link between 'vdom1' and vdom2' can created.

  C. An inter-VDOM link between 'vdom2' and vdom3' can created.

  D. Inter-VDOM link links must be manually configured for FortiGuard traffic.

  Correct Answer: AB

• Question 532:

  You have created a new administrator account, and assign it the prof_admin profile. Which is false about that account's permissions?

  A. It cannot upgrade or downgrade firmware.

  B. It can create and assign administrator accounts to parts of its own VDOM.

  C. It can reset forgotten passwords for other administrator accounts such as "admin".

  D. It has a smaller permissions scope than accounts with the "super_admin" profile.

  Correct Answer: A

• Question 533:

  A static route is configured for a FortiGate unit from the CLI using the following commands:

  

  Which of the following conditions are required for this static default route to be displayed in the FortiGate unit's routing table? (Choose two.)

  A. The administrative status of the wan1 interface is displayed as down.

  B. The link status of the wan1 interface is displayed as up.

  C. All other default routers should have a lower distance.

  D. The wan1 interface address and gateway address are on the same subnet.

  Correct Answer: BD

• Question 534:

  Which statement best describes what a Fortinet System on a Chip (SoC) is?

  A. Low-power chip that provides general purpose processing power

  B. Chip that combines general purpose processing power with Fortinet's custom ASIC technology

  C. Light-version chip (with fewer features) of an SP processor

  D. Light-version chip (with fewer features) of a CP processor

  Correct Answer: B

• Question 535:

  Files that are larger than the oversized limit are subjected to which Antivirus check?

  A. Grayware

  B. Virus

  C. Sandbox

  D. Heuristic

  Correct Answer: C

• Question 536:

  Which of the following traffic shaping functions can be offloaded to a NP processor? (Choose two.)

  A. Que prioritization

  B. Traffic cap (bandwidth limit)

  C. Differentiated services field rewriting

  D. Guarantee bandwidth

  Correct Answer: CD

• Question 537:

  Which of the following statements is correct concerning multiple vdoms configured in a FortiGate device?

  A. FortiGate devices,from the FGT/FWF 60D and above, all support VDOMS.

  B. All FortiGate devices scale to 250 VDOMS.

  C. Each VDOM requires its own FortiGuard license.

  D. FortiGate devices support more NAT/route VDOMs than Transparent Mode VDOMs.

  Correct Answer: A

• Question 538:

  Which of the following statements best describes what the Document Fingerprinting feature is for?

  A. Protects sensitive documents from leakage

  B. Appends a fingerprint signature to all documents sent by users

  C. Appends a fingerprint signature to all the emails sent by users

  D. Validates the fingerprint signature in users' emails

  Correct Answer: A

• Question 539:

  Which statement describes how traffic flows in sessions handled by a slave unit in an active- active HA cluster?

  A. Packet are sent directly to the slave unit using the slave physical MAC address.

  B. Packets are sent directly to the slave unit using the HA virtual MAC address.

  C. Packets arrived at both units simultaneously, but only the salve unit forwards the session.

  D. Packets are first sent to the master unit, which then forwards the packets to the slave unit.

  Correct Answer: D

• Question 540:

  Which of the following statements are true regarding WAN Link Load Balancing? (Choose two).

  A. There can be only one virtual WAN Link per VDOM.

  B. FortiGate can measure the quality of each link based on latency, jitter, or packets percentage.

  C. Link health checks can be performed over each link member if the virtual WAN interface.

  D. Distance and priority values are configured in each link member if the virtual WAN interface.

  Correct Answer: AC