Fortinet Fortinet Certifications NSE4 Questions & Answers

• Question 271:

  Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)

  A. The web client SSL handshake.

  B. The web server SSL handshake.

  C. File buffering.

  D. Communication with the URL filter process.

  Correct Answer: AB

• Question 272:

  Which operating system vulnerability can you protect when selecting signatures to include in an IPS sensor? (choose three)

  A. Irix

  B. QNIX

  C. Linux

  D. Mac OS

  E. BSD

  Correct Answer: CDE

• Question 273:

  Which best describes the authentication timeout?

  A. How long FortiGate waits for the user to enter his or her credentials.

  B. How long a user is allowed to send and receive traffic before he or she must authenticate again.

  C. How long an authenticated user can be idle (without sending traffic) before they must authenticate again.

  D. How long a user-authenticated session can exist without having to authenticate again.

  Correct Answer: C

• Question 274:

  Which of the following IPsec configuration modes can be used when the FortiGate is running in NAT mode?

  A. Policy-based VPN only

  B. Both policy-based and route-based VPN.

  C. Route-based VPN only.

  D. IPSec VPNs are not supported when the FortiGate is running in NAT mode.

  Correct Answer: B

• Question 275:

  An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network.

  Which of the following FortiAnalyzers will be detected?

  A. 192.168.11.100

  B. 192.168.11.251

  C. 192.168.10.100

  D. 192.168.10.251

  Correct Answer: AB

• Question 276:

  Examine the following FortiGate web proxy configuration; then answer the question below: config web-proxy explicit set pac-file-server-status enable set pac-file-server-port 8080 set pac-file-name wpad.dat end Assuming that the FortiGate proxy IP address is 10.10.1.1, which URL must an Internet browser use to

  download the PAC file?

  A. https://10.10.1.1:8080

  B. https://10.10.1.1:8080/wpad.dat

  C. http://10.10.1.1:8080/

  D. http://10.10.1.1:8080/wpad.dat

  Correct Answer: D

• Question 277:

  Which of the following are operating mode supported in FortiGate devices? (Choose two)

  A. Proxy

  B. Transparent

  C. NAT/route

  D. Offline inspection

  Correct Answer: BC

• Question 278:

  Which statements are correct regarding an IPv6 over IPv4 IPsec configuration? (Choose two.)

  A. The source quick mode selector must be an IPv4 address.

  B. The destination quick mode selector must be an IPv6 address.

  C. The Local Gateway IP must be an IPv4 address.

  D. The remote gateway IP must be an IPv6 address.

  Correct Answer: BC

• Question 279:

  Examine the exhibit; then answer the question below.

  

  Which statement describes the green status indicators that appear next to the different FortiGuard Distribution Network services as illustrated in the exhibit?

  A. They indicate that the FortiGate has the latest updates available from the FortiGuard Distribution Network.

  B. They indicate that updates are available and should be downloaded from the FortiGuard Distribution Network to the FortiGate unit.

  C. They indicate that the FortiGate is in the process of downloading updates from the FortiGuard Distribution Network.

  D. They indicate that the FortiGate is able to connect to the FortiGuard Distribution Network.

  Correct Answer: D

• Question 280:

  Which web filtering inspection mode inspects DNS traffic?

  A. DNS-based.

  B. FQDN-based.

  C. Flow-based.

  D. URL-based.

  Correct Answer: A