Fortinet Fortinet Certifications NSE4 Questions & Answers

• Question 91:

  Data leak prevention archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Choose three.)

  A. POP3

  B. SNMP

  C. IPsec

  D. SMTP

  E. HTTP

  Correct Answer: ADE

• Question 92:

  What are the ways FortiGate can monitor logs? (Choose three.)

  A. MIB

  B. SMS

  C. Alert Emails

  D. SNMP

  E. FortiAnalyzer

  F. Alert Message Console

  Correct Answer: CDF

• Question 93:

  Which statements are true regarding traffic shaping that is applied in an application sensor, and associated with the firewall policy? (Choose two.)

  A. Shared traffic shaping cannot be used.

  B. Only traffic matching the application control signature is shaped.

  C. Can limit the bandwidth usage of heavy traffic applications.

  D. Per-IP traffic shaping cannot be used.

  Correct Answer: BC

• Question 94:

  Which of the following statements are correct concerning IKE mode config? (Choose two)

  A. It can dynamically assign IP addresses to IPsec VPN clients.

  B. It can dynamically assign DNS settings to IPsec VPN clients.

  C. It uses the ESP protocol.

  D. It can be enabled in the phase 2 configuration.

  Correct Answer: AB

• Question 95:

  What logging options are supported on a FortiGate unit? (Choose two.)

  A. LDAP

  B. Syslog

  C. FortiAnalyzer

  D. SNMP

  Correct Answer: BC

• Question 96:

  Bob wants to send Alice a file that is encrypted using public key cryptography.

  Which of the following statements is correct regarding the use of public key cryptography in this scenario?

  A. Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file.

  B. Bob will use his public key to encrypt the file and Alice will use Bob's private key to decrypt the file.

  C. Bob will use Alice's public key to encrypt the file and Alice will use her private key to decrypt the file.

  D. Bob will use his public key to encrypt the file and Alice will use her private key to decrypt the file.

  Correct Answer: C

• Question 97:

  What action does an IPsec Gateway take with the user traffic routed to an IPsec VPN when it does not match any phase 2 quick mode selector?

  A. Traffic is dropped

  B. Traffic is routed across the default phase 2.

  C. Traffic is routed to the next available route in the routing table.

  D. Traffic is routed unencrypted to the interface where the IPsec VPN is terminating.

  Correct Answer: A

• Question 98:

  An administrator wants to create an IPsec VPN tunnel between two FortiGate devices.

  Which three configuration steps must be performed on both units to support this scenario? (Choose three.)

  A. Create firewall policies to allow and control traffic between the source and destination IP addresses.

  B. Configure the appropriate user groups to allow users access to the tunnel.

  C. Set the operating mode to IPsec VPN mode.

  D. Define the phase 2 parameters.

  E. Define the Phase 1 parameters.

  Correct Answer: ADE

• Question 99:

  Which statements are correct for port pairing and forwarding domains? (Choose two.)

  A. They both create separate broadcast domains.

  B. Port Pairing works only for physical interfaces.

  C. Forwarding Domain only applies to virtual interfaces

  D. They may contain physical and/or virtual interfaces.

  Correct Answer: AD

• Question 100:

  Which statements are correct regarding URL filtering on a FortiGate unit? (Choose two.)

  A. The allowed actions for URL filtering include allow, block, monitor and exempt.

  B. The allow actions for URL filtering and Allow and Block only.

  C. URL filters may be based on patterns using simple text, wildcards and regular expressions.

  D. URL filters are based on simple text only and require an exact match.

  Correct Answer: AC