Fortinet Network Security Expert 4 Written Exam - FortiOS 5.4 - NSE4-5.4 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

An administrator has configured a dialup IPsec VPN with XAuth. Which method statement best describes this scenario?

A. Only digital certificates will be accepted as an authentication method in phase 1. B. Dialup clients must provide a username and password for authentication. C. Dialup clients must provide their local ID during phase 2 negotiations. D. Phase 1 negotiations will skip pre-shared key exchange.

Discussion 0

Correct Answer: B Vote an answer

Question 2

What inspections are executed by the IPS engine? (Choose three.)

A. Flow-based web filtering B. Flow-based data leak prevention C. Proxy-based antispam D. Application control E. Proxy-based antivirus

Discussion 0

Correct Answer: A,B,D Vote an answer

Question 3

A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups.
What is required in the SSL VPN configuration to meet these requirements?

A. Different SSL VPN realms for each group B. Different virtual SSLVPN IP addresses for each group C. Two separated SSL VPNs in different interfaces of the same VDOM D. Two firewall policies with different captive portals

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

In the debug command output shown in the exhibit, which of the following best described the MAC address
00:09:0f:69:03:7e?

A. It is the MAC address of another network devices located in the same LAN segment as the FortiGate unit's port1 interface. B. It is the primary MAC address of the port interface. C. It is the HA virtual MAC address. D. It is one of the secondary MAC addresses of the port1 interface.

Discussion 0

Correct Answer: A Vote an answer

Question 5

Which of the following antivirus and attack definition update options are supported by FortiGate units? (Select all that apply.)

A. Manual update by downloading the signatures from the support site. B. Pull updates from the FortiGate device C. "update-AV/AS" command from the CLI D. Push updates from the FortiGuard Distribution Network.

Discussion 0

Correct Answer: A,B,D Vote an answer

Question 6

Which two web filtering inspection modes inspect the full URL? (Choose two.)

A. URL-based B. DNS-based. C. Flow-based. D. Proxy-based.

Discussion 0

Correct Answer: C,D Vote an answer

Question 7

The exhibit shows two static routes to the same destinations subnet 172.20.168.0/24.

Which of the following statements correctly describes this static routing configuration? (choose two)

A. The FortiGate unit will evenly share the traffic to 172.20.168.0/24 between routes. B. Both routes will show up in the routing table. C. The FortiGate will route the traffic to 172.20.168.0/24 only through one route. D. Only one route will show up in the routing table.

Discussion 0

Correct Answer: C,D Vote an answer

Question 8

Which of the following statements is correct about configuring web filtering overrides?

A. Admin overrides require an administrator to manually allow pending override requests which are listed in the Override Monitor. B. Using Web Filtering Overrides requires the use of Firewall Policy Authentication. C. The Override option for FortiGuard Web Filtering is available for any user group type. D. The Override Scopes of User and User Group are only for use when Firewall Policy Authentication is also being used.

Discussion 0

Correct Answer: D Vote an answer

Question 9

Which firewall objects can be included in the Destination Address field of a firewall policy? (Choose three.)

A. Virtual IP address. B. IP address group. C. MAC address D. IP address pool. E. IP address.

Discussion 0

Correct Answer: A,B,E Vote an answer

Question 10

How is the FortiGate password recovery process?

A. Interrupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry. B. Hold down the CTRL + Esc (Escape) keys during reboot, then reset the admin password. C. Log in through the console port using the "maintainer" account within several seconds of physically power cycling the FortiGate. D. Interrupt the boot sequence and restore a configuration file for which the password has been modified.

Discussion 0

Correct Answer: C Vote an answer

Question 11

Examine this output from the diagnose sys top command:

Which statements about the output are true? (Choose two.)

A. All the processes listed are in sleeping state B. The sshd process is using 123 pages of memory C. sshd is the process consuming most memory D. sshd is the process consuming most CPU

Discussion 0

Correct Answer: A,D Vote an answer