Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 561:

  Which traffic can match a firewall policy's "Services" setting? (Choose three.)

  A. HTTP

  B. SSL

  C. DNS

  D. RSS

  E. HTTPS

  Correct Answer: ACE

• Question 562:

  Acme Web Hosting is replacing one of their firewalls with a FortiGate. It must be able to apply port forwarding to their back-end web servers while blocking virus uploads and TCP SYN floods from attackers. Which operation mode is the best choice for these requirements?

  A. NAT/route

  B. NAT mode with an interface in one-arm sniffer mode

  C. Transparent mode

  D. No appropriate operation mode exists

  Correct Answer: A

• Question 563:

  Which of the following are possible actions for static URL filtering? (Choose three.)

  A. Allow

  B. Block

  C. Exempt

  D. Warning

  E. Shape

  Correct Answer: ABC

• Question 564:

  Which statement best describes what SSL VPN Client Integrity Check does?

  A. Blocks SSL VPN connection attempts from users that has been blacklisted.

  B. Detects the Windows client security applications running in the SSL VPN client's PCs.

  C. Validates the SSL VPN user credential.

  D. Verifies which SSL VPN portal must be presented to each SSL VPN user.

  E. Verifies that the latest SSL VPN client is installed in the client's PC.

  Correct Answer: B

• Question 565:

  What are examples of correct syntax for the session table diagnostics command? (Choose two.)

  A. diagnose sys session filter clear

  B. diagnose sys session src 10.0.1.254

  C. diagnose sys session filter

  D. diagnose sys session filter list dst.

  Correct Answer: AC

• Question 566:

  Which statement best describes the objective of the SYN proxy feature available in SP processors?

  A. Accelerate the TCP 3-way handshake

  B. Collect statistics regarding traffic sessions

  C. Analyze the SYN packet to decide if the new session can be offloaded to the SP processor

  D. Protect against SYN flood attacks.

  Correct Answer: D

• Question 567:

  Which of the following statements are true regarding DLP File Type Filtering? (Choose two.)

  A. Filters based on file extension

  B. Filters based on fingerprints

  C. Filters based on file content

  D. File types are hard coded in the FortiOS

  Correct Answer: AC

• Question 568:

  Which of the following settings can be configured per VDOM? (Choose three.)

  A. Operating mode (NAT/route or transparent)

  B. Static routes

  C. Hostname

  D. System time

  E. Firewall Policies

  Correct Answer: ABE

• Question 569:

  Which protocols can you use for secure administrative access to a FortiGate? (Choose two)

  A. SSH

  B. Telnet

  C. NTLM

  D. HTTPS

  Correct Answer: AD

• Question 570:

  Review the exhibit of an explicit proxy policy configuration. If there is a proxy connection attempt coming from the IP address 10.0.1.5, and from a user that has not authenticated yet, what action does the FortiGate proxy take?

  

  A. User is prompted to authenticate. Traffic from the user Student will be allowed by the policy #1. Traffic from any other user will be allowed by the policy #2.

  B. User is not prompted to authenticate. The connection is allowed by the proxy policy #2.

  C. User is not prompted to authenticate. The connection will be allowed by the proxy policy #1.

  D. User is prompted to authenticate. Only traffic from the user Student will be allowed. Traffic from any other user will be blocked.

  Correct Answer: D