Fortinet Network Security Expert 4 Written Exam (400) - NSE4 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What is IPsec Perfect Forwarding Secrecy (PFS)?

A. A 'security-association- agreement' protocol. B. A phase-1 setting that allows the use of symmetric encryption. C. A 'key-agreement' protocol. D. A phase-2 setting that allows the recalculation of a new common secret key each time the session key expires.

Discussion 0

Correct Answer: D Vote an answer

Question 2

The exhibit is a screen shot of an Application Control profile.

Different settings are circled and numbered. Select the number identifying the setting which will provide additional information about YouTube access, such as the name of the video watched.

A. 3 B. 2 C. 1 D. 5 E. 4

Discussion 0

Correct Answer: E Vote an answer

Question 3

What functions can the IPv6 Neighbor Discovery Protocol accomplish? (Choose two.)

A. Determine other nodes reachability. B. Autoconfigure addresses and prefixes. C. Auto-adjust the MTU setting. D. Negotiate the encryption parameters to use.

Discussion 0

Correct Answer: A,B Vote an answer

Question 4

Which of the following IPsec configuration modes can be used when the FortiGate is running in NAT mode?

A. Both policy-based and route-based VPN. B. IPSec VPNs are not supported when the FortiGate is running in NAT mode. C. Policy-based VPN only D. Route-based VPN only.

Discussion 0

Correct Answer: A Vote an answer

Question 5

Which define device identification? (Choose two.)

A. You cannot combine source user and source device in the same firewall policy. B. Device identification is enabled by default on all interfaces. C. Enabling a source device in a firewall policy enables device identification on the source interfaces of that policy. D. FortiClient can be used as an agent based device identification technique. E. Only agentless device identification techniques are supported.

Discussion 0

Correct Answer: C,D Vote an answer

Question 6

What methods can be used to deliver the token code to a user that is configured to use two-factor authentication? (Choose three.)

A. Code books. B. SMS phone message. C. Email. D. FortiToken. E. Browser pop-up window.

Discussion 0

Correct Answer: B,C,D Vote an answer

Question 7

A FortiGate devices is configured with four VDOMs: 'root' and 'vdom1' are in NAT/route mode; 'vdom2' and 'vdom2' are in transparent mode. The management VDOM is 'root'.
Which of the following statements are true? (Choose two.)

A. An inter-VDOM link between 'vdom1' and vdom2' can created. B. Inter-VDOM link links must be manually configured for FortiGuard traffic. C. An inter-VDOM link between 'vdom2' and vdom3' can created. D. An inter-VDOM link between 'root' and 'vdom1' can be created.

Discussion 0

Correct Answer: A,D Vote an answer

Question 8

What are the requirements for a HA cluster to maintain TCP connections after device or link failover? (Choose two.)

A. Enable override. B. Connections must not be handled by a proxy. C. Enable session pick-up. D. Connections must be UDP or ICMP.

Discussion 0

Correct Answer: B,C Vote an answer

Question 9

Which of the following are possible actions for static URL filtering? (Choose three.)

A. Allow B. Shape C. Warning D. Block E. Exempt

Discussion 0

Correct Answer: A,D,E Vote an answer

Question 10

Which of the following statements are true regarding application control? (Choose two.)

A. Application control is based on TCP destination port numbers. B. Traffic shaping can be applied to the detected application traffic. C. Application control is proxy based. D. Encrypted traffic can be identified by application control.

Discussion 0

Correct Answer: B,D Vote an answer