NSE4-5.4

NSE4-5.4 practice questions, page 13 of 23, with answer review and explanations.

Question 61

View the Exhibit. The administrator needs to confirm that FortiGate 2 is properly routing that traffic to the 10.0.1.0/24 subnet. The administrator needs to confirm it by sending ICMP pings to FortiGate 2 from the CLI of FortiGate 1. What ping option needs to be enabled before running the ping?

  1. Execute ping-options source port1
  2. Execute ping-options source 10.200.1.1.
  3. Execute ping-options source 10.200.1.2
  4. Execute ping-options source 10.0.1.254

Question 62

How can you format the FortiGate flash disk?

  1. Load the hardware test (HQIP) image.
  2. Execute the CLI command execute formatlogdisk.
  3. Load a debug FortiOS image.
  4. Select the format boot device option from the BIOS menu.

Question 63

How do you configure inline SSL inspection on a firewall policy? (Choose two.)

  1. Enable one or more flow-based security profiles on the firewall policy.
  2. Enable the SSL/SSH Inspection profile on the firewall policy.
  3. Execute the inline ssl inspection CLI command.
  4. Enable one or more proxy-based security profiles on the firewall policy.

Question 64

Which traffic sessions can be offloaded to a NP6 processor? (Choose two.)

  1. IPv6
  2. RIP
  3. GRE
  4. NAT64

Question 65

View the exhibit. Based on this output, which statements are correct? (Choose two.)

  1. FortiGate generated an event log for system conserve mode.
  2. FortiGate has entered in to system conserve mode.
  3. By default, the FortiGate blocks new sessions.
  4. FortiGate changed the global av-failopen settings to idledrop.