Fortinet Fortinet Certifications NSE4 Questions & Answers

• Question 111:

  Which protocol can an Internet browser use to download the PAC file with the web proxy configuration?

  A. HTTPS

  B. FTP

  C. TFTP

  D. HTTP

  Correct Answer: D

• Question 112:

  Which FSSO agents are required for a FSSO agent-based polling mode solution?

  A. Collector agent and DC agents

  B. Polling agent only

  C. Collector agent only

  D. DC agents only

  Correct Answer: A

• Question 113:

  Which of the following items does NOT support the Logging feature?

  A. File Filter

  B. Application control

  C. Session timeouts

  D. Administrator activities

  E. Web URL filtering

  Correct Answer: C

• Question 114:

  If you enable the option "Generate Logs when Session Starts", what effect does this have on the number of traffic log messages generated for each session?

  A. No traffic log message is generated.

  B. One traffic log message is generated.

  C. Two traffic log messages are generated.

  D. A log message is only generated if there is a security event.

  Correct Answer: C

• Question 115:

  Which of the following statements is correct regarding FortiGate interfaces and spanning tree protocol? (Choose Two)

  A. Only FortiGate switch interfaces Participate in spanning tree.

  B. All FortiGate interfaces in transparent mode VDOMs participate in spanning tree.

  C. All FortiGate interfaces in NAT/route mode VDOMs Participate in spanning tree.

  D. All FortiGate interfaces in transparent mode VDOMs may block or forward BPDUs.

  Correct Answer: BD

• Question 116:

  Regarding the use of web-only mode SSL VPN, which statement is correct?

  A. It support SSL version 3 only.

  B. It requires a Fortinet-supplied plug-in on the web client.

  C. It requires the user to have a web browser that suppports 64-bit cipher length.

  D. The JAVA run-time environment must be installed on the client.

  Correct Answer: C

• Question 117:

  Which statement describes how traffic flows in sessions handled by a slave unit in an active-active HA cluster?

  A. Packet are sent directly to the slave unit using the slave physical MAC address.

  B. Packets are sent directly to the slave unit using the HA virtual MAC address.

  C. Packets arrived at both units simultaneously, but only the salve unit forwards the session.

  D. Packets are first sent to the master unit, which then forwards the packets to the slave unit.

  Correct Answer: D

• Question 118:

  A FortiGate is configured to receive push updates from the FortiGuard Distribution Network, however, they are not being received.

  Which is one reason for this problem?

  A. The FortiGate is connected to multiple ISPs.

  B. FortiGuard scheduled updates are enabled in the FortiGate configuration.

  C. The FortiGate is in Transparent mode.

  D. The external facing interface of the FortiGate is configured to get the IP address from a DHCP server.

  Correct Answer: D

• Question 119:

  How many packets are interchanged between both IPSec ends during the negotiation of a main-mode phase 1?

  A. 5

  B. 3

  C. 2

  D. 6

  Correct Answer: D

• Question 120:

  Review the output of the command get router info routing-table database shown in the exhibit below; then answer the question following it.

  

  Which two statements are correct regarding this output? (Choose two.)

  A. There will be six routes in the routing table.

  B. There will be seven routes in the routing table.

  C. There will be two default routes in the routing table.

  D. There will be two routes for the 10.0.2.0/24 subnet in the routing table.

  Correct Answer: AC