NSE4-5.4

NSE4-5.4 practice questions, page 11 of 23, with answer review and explanations.

Question 51

What information is flushed when the chunk-size value is changed in the config dlp settings?

  1. The database for DLP document fingerprinting
  2. The supported file types in the DLP filters
  3. The archived files and messages
  4. The file name patterns in the DLP filters

Question 52

How does FortiGate select the central SNAT policy that is applied to a TCP session?

  1. It selects the SNAT policy specified in the configuration of the outgoing interface.
  2. It selects the first matching central-SNAT policy from top to bottom.
  3. It selects the central-SNAT policy with the lowest priority.
  4. It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.

Question 53

When using WPAD DNS method, what is the FQDN format that browsers use to query the DNS server?

  1. wpad.<local-domain>
  2. srv_tcp.wpad.<local-domain>
  3. srv_proxy.<local-domain>/wpad.dat
  4. proxy.<local-domain>.wpad

Question 54

An administrator is using the FortiGate built-in sniffer to capture HTTP traffic between a client and a server, however, the sniffer output shows only the packets related with TCP session setups and disconnections. Why?

  1. The administrator is running the sniffer on the internal interface only.
  2. The filter used in the sniffer matches the traffic only in one direction.
  3. The FortiGate is doing content inspection.
  4. TCP traffic is being offloaded to an NP6.

Question 55

Which of the following statements about advanced AD access mode for FSSO collector agent are true? (Choose two.)

  1. It is only supported if DC agents are deployed.
  2. FortiGate can act as an LDAP client configure the group filters.
  3. It supports monitoring of nested groups.
  4. It uses the Windows convention for naming, that is, Domain\Username.