Fortinet Fortinet Certifications NSE4-5.4 Questions & Answers

• Question 571:

  What protocol cannot be used with the active authentication type?

  A. Local

  B. RADIUS

  C. LDAP

  D. RSSO

  Correct Answer: D

• Question 572:

  When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search option. What is a valid reason for using the Full Search option, instead?

  A. The search items you are looking for are not contained in indexed log fields.

  B. A quick search only searches data received within the last 24 hours.

  C. You want the search to include the FortiAnalyzer's local logs.

  D. You want the search to include content archive data as well.

  Correct Answer: A

• Question 573:

  The diag sys session list command is executed in the CLI. The output of this command is shown in the exhibit.

  

  Based on the output from this command, which of the following statements is correct?

  A. This is a UDP session.

  B. Traffic shaping is being applied to this session.

  C. This is an ICMP session.

  D. This traffic has been authenticated.

  E. This session matches a firewall policy with ID 5.

  Correct Answer: B

• Question 574:

  FILL BLANK The___________ CLI command is used on the FortiGate unit to run static commands such as ping or to reset the FortiGate unit to factory defaults.

  Correct Answer: execute

• Question 575:

  FILL BLANK In addition to AntiVirus services, the FortiGuard Subscription Services provide IPS, Web Filtering, and _________ services.

  Correct Answer: antispam

• Question 576:

  FILL BLANK When creating administrative users, the assigned _________ determines user rights on the FortiGate unit.

  Correct Answer: access profile