Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 71:

  An administrator wishes to generate a report showing Top Traffic by service type. They notice

  that web traffic overwhelms the pie chart and want to exclude the web traffic from the report. Which of the following statements best describes how to do this?

  A. In the Service field of the Data Filter, type 80/tcp and select the NOT checkbox.
  B. Add the following entry to the Generic Field section of the Data Filter: service="!web".
  C. When editing the chart, uncheck wlog to indicate that Web Filtering data is being excluded when generating the chart.
  D. When editing the chart, enter 'http' in the Exclude Service field.
  A. In the Service field of the Data Filter, type 80/tcp and select the NOT checkbox.

• Question 72:

  View the exhibit.

  

  Why is the administrator getting the error shown in the exhibit?

  A. The administrator admin does not have the privileges required to configure global settings.
  B. The global settings cannot be configured from the root VDOM context.
  C. The command config system global does not exist in FortiGate.
  D. The administrator must first enter the command edit global.
  A. The administrator admin does not have the privileges required to configure global settings.

• Question 73:

  Which statement is an advantage of using a hub and spoke IPsec VPN configuration instead of a fully-meshed set of IPsec tunnels?

  A. Using a hub and spoke topology provides full redundancy.
  B. Using a hub and spoke topology requires fewer tunnels.
  C. Using a hub and spoke topology uses stronger encryption protocols.
  D. Using a hub and spoke topology requires more routes.
  B. Using a hub and spoke topology requires fewer tunnels.

• Question 74:

  Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)

  A. The web client SSL handshake.
  B. The web server SSL handshake.
  C. File buffering.
  D. Communication with the URL filter process.
  A. The web client SSL handshake.
  B. The web server SSL handshake.

• Question 75:

  Both the FortiGate and FortiAnalyzer units can notify administrators when certain alert conditions are met. Considering this, which of the following statements is NOT correct?

  A. On a FortiGate device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.
  B. On a FortiAnalyzer device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.
  C. Only a FortiAnalyzer device can send the alert notification in the form of a syslog message.
  D. Both the FortiGate and FortiAnalyzer devices can send alert notifications in the form of an email alert.
  B. On a FortiAnalyzer device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.

• Question 76:

  An administrator has disabled Accept push updates under Antivirus and IPS Updates. Which statements is true when this setting is disabled?

  A. The extreme database is disabled.
  B. New AV definitions are not added to FortiGate as soon as they are releases by FortiGuard.
  C. Administrators cannot manually upload new AV definitions to the FortiGate.
  D. FortiGate does not send files to FortiSandbox for inspection.
  B. New AV definitions are not added to FortiGate as soon as they are releases by FortiGuard.

• Question 77:

  Which network protocols are supported for administrative access to a FortiGate unit? (Choose three.)

  A. SNMP
  B. WINS
  C. HTTP
  D. Telnet
  E. SSH
  C. HTTP
  D. Telnet
  E. SSH

• Question 78:

  Examine the Exhibits shown below, then answer the question that follows. Review the following DLP Sensor (Exhibit 1):

  

  Review the following File Filter list for rule #1 (Exhibit 2):

  

  Review the following File Filter list for rule #2 (Exhibit 3):

  

  Review the following File Filter list for rule #3 (Exhibit 4):

  

  An MP3 file is renamed to `workbook.exe' and put into a ZIP archive. It is then sent through the FortiGate device over HTTP. It is intercepted and processed by the configuration shown in the above Exhibits 1-4. Assuming the file is not too large for the File scanning threshold, what action will the FortiGate unit take?

  A. The file will be detected by rule #1 as an `Audio (mp3)', a log entry will be created and it will be allowed to pass through.
  B. The file will be detected by rule #2 as a "*.exe", a log entry will be created and the interface that received the traffic will be brought down.
  C. The file will be detected by rule #3 as an Archive(zip), blocked, and a log entry will be created.
  D. Nothing, the file will go undetected.
  A. The file will be detected by rule #1 as an `Audio (mp3)', a log entry will be created and it will be allowed to pass through.

• Question 79:

  Which of the following statements are true about IPsec VPNs? (Choose three.)

  A. IPsec increases overhead and bandwidth.
  B. IPsec operates at the layer 2 of the OSI model.
  C. End-user's network applications must be properly pre-configured to send traffic across the IPsec VPN.
  D. IPsec protects upper layer protocols.
  E. IPsec operates at the layer 3 of the OSI model.
  A. IPsec increases overhead and bandwidth.
  D. IPsec protects upper layer protocols.
  E. IPsec operates at the layer 3 of the OSI model.

• Question 80:

  A FortiClient fails to establish a VPN tunnel with a FortiGate unit. The following information is displayed in the FortiGate unit logs:

  

  Which of the following statements is a possible cause for the failure to establish the VPN tunnel?

  A. An IPSec DHCP server is not enabled on the external interface of the FortiGate unit.
  B. There is no IPSec firewall policy configured for the policy-based VPN.
  C. There is a mismatch between the FortiGate unit and the FortiClient IP addresses in the phase 2 settings.
  D. The phase 1 configuration on the FortiGate unit uses Aggressive mode while FortiClient uses Main mode.
  A. An IPSec DHCP server is not enabled on the external interface of the FortiGate unit.