10 Tips For Replace NSE4-5.4 pdf

New Questions 7

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

A. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.

B. ADVPN is only supported with IKEv2.

C. Tunnels are negotiated dynamically between spokes.

D. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

View Answer

New Questions 8

View the Exhibit.

The administrator needs to confirm that FortiGate 2 is properly routing that traffic to the 10.0.1.0/24 subnet. The administrator needs to confirm it by sending ICMP pings to FortiGate 2 from the CLI of FortiGate 1. What ping option needs to be enabled before running the ping?

A. Execute ping-options source port1

B. Execute ping-options source 10.200.1.1.

C. Execute ping-options source 10.200.1.2

D. Execute ping-options source 10.0.1.254

View Answer

New Questions 9

What statement describes what DNS64 does?

A. Converts DNS A record lookups to AAAA record lookups.

B. Translates the destination IPv6 address of the DNS traffic to an IPv4 address.

C. Synthesizes DNS AAAA records from A records.

D. Translates the destination IPv4 address of the DNS traffic to an IPv6 address.

View Answer

New Questions 10

An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to SSL VPN. How can this be achieved?

A. Disabling split tunneling

B. Configuring web bookmarks

C. Assigning public IP addresses to SSL VPN clients

D. Using web-only mode

View Answer

New Questions 11

What methods can be used to deliver the token code to a user who is configured to use two-factor authentication? (Choose three.)

A. Code blocks

B. SMS phone message

C. FortiToken

D. Browser pop-up window

E. Email

View Answer

New Questions 12

Which statements about the output are correct? (Choose two.)

A. FortiGate received a TCP SYN/ACK packet.

B. The source IP address of the packet was translated to 10.0.1.10.

C. FortiGate routed the packet through port 3.

D. The packet was allowed by the firewall policy with the ID 00007fc0.

View Answer

New Questions 13

View the exhibit.

What is the effect of the Disconnect Cluster Member operation as shown in the exhibit? (Choose two.)

A. The HA mode changes to standalone.

B. The firewall policies are deleted on the disconnected member.

C. The system hostname is set to the FortiGate serial number.

D. The port3 is configured with an IP address for management access.

View Answer

New Questions 14

Examine this output from the diagnose sys top command:

Which statements about the output are true? (Choose two.)

A. sshd is the process consuming most memory

B. sshd is the process consuming most CPU

C. All the processes listed are in sleeping state

D. The sshd process is using 123 pages of memory

View Answer

New Questions 15

What FortiGate feature can be used to allow IPv6 clients to connect to IPv4 servers?

A. IPv6-over-IPv4 IPsec

B. NAT64

C. IPv4-over-IPv6 IPsec

D. NAT66

View Answer

New Questions 16

Which of the following statements about NTLM authentication are correct? (Choose two.)

A. It is useful when users log in to DCs that are not monitored by a collector agent.

B. It takes over as the primary authentication method when configured alongside FSSO.

C. Multi-domain environments require DC agents on every domain controller.

D. NTLM-enabled web browsers are required.

View Answer