Fortinet NSE4-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE4-5.4 Online Questions & Answers

• Question 81:

  A FortiGate device is configured with two VDOMs. The management VDOM is 'root' , and is configured in transparent mode,'vdom1' is configured as NAT/route mode. Which traffic is generated only by 'root' and not 'vdom1'? (Choose three.)

  A. SNMP traps
  B. FortiGaurd
  C. ARP
  D. NTP
  E. ICMP redirect
  A. SNMP traps
  B. FortiGaurd
  D. NTP

• Question 82:

  FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed. What action must be taken for one of these profiles to become active?

  A. The protection profile must be assigned to a firewall policy.
  B. The "Use Protection Profile" option must be selected in the Web Config tool under the sections for AntiVirus, IPS, WebFilter, and AntiSpam.
  C. The protection profile must be set as the Active Protection Profile.
  D. All of the above.
  A. The protection profile must be assigned to a firewall policy.

• Question 83:

  Which traffic sessions can be offloaded to a NP6 processor? (Choose two.)

  A. IPv6
  B. RIP
  C. GRE
  D. NAT64
  A. IPv6
  D. NAT64

• Question 84:

  What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully- meshed set of IPSec tunnels? (Select all that apply.)

  A. Using a hub and spoke topology is required to achieve full redundancy.
  B. Using a hub and spoke topology simplifies configuration because fewer tunnels are required.
  C. Using a hub and spoke topology provides stronger encryption.
  D. The routing at a spoke is simpler, compared to a meshed node.
  B. Using a hub and spoke topology simplifies configuration because fewer tunnels are required.
  D. The routing at a spoke is simpler, compared to a meshed node.

• Question 85:

  How can you format the FortiGate flash disk?

  A. Load the hardware test (HQIP) image.
  B. Execute the CLI command execute formatlogdisk.
  C. Load a debug FortiOS image.
  D. Select the format boot device option from the BIOS menu.
  D. Select the format boot device option from the BIOS menu.

• Question 86:

  A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups. What is required in the SSL VPN configuration to meet these requirements?

  A. Two separated SSL VPNs in different interfaces of the same VDOM
  B. Different SSL VPN realms for each group
  C. Different virtual SSLVPN IP addresses for each group
  D. Two firewall policies with different captive portals
  B. Different SSL VPN realms for each group

• Question 87:

  When configuring a server load balanced virtual IP, which of the following is the best distribution algorithm to be used in applications where the same physical destination server must be maintained between sessions?

  A. Static
  B. Round robin
  C. Weighted round robin
  D. Least connected
  A. Static

• Question 88:

  Which of the following network protocols can be used to access a FortiGate unit as an administrator?

  A. HTTPS, HTTP, SSH, TELNET, PING, SNMP
  B. FTP, HTTPS, NNTP, TCP, WINS
  C. HTTP, NNTP, SMTP, DHCP
  D. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS
  E. Telnet, UDP, NNTP, SMTP
  A. HTTPS, HTTP, SSH, TELNET, PING, SNMP

• Question 89:

  Which of the following web filtering modes can inspect the full URL? (Choose two.)

  A. Proxy based
  B. DNS based
  C. Policy based
  D. Flow based
  A. Proxy based
  D. Flow based

• Question 90:

  An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

  A. The interface has been configured for one-arm sniffer.
  B. The interface is a member of a virtual wire pair.
  C. The operation mode is transparent.
  D. The interface is a member of a zone.
  E. Captive portal is enabled in the interface.
  A. The interface has been configured for one-arm sniffer.
  B. The interface is a member of a virtual wire pair.
  C. The operation mode is transparent.