NSE4-5.4

NSE4-5.4 practice questions, page 15 of 23, with answer review and explanations.

Question 71

View the exhibit. VDOM1 is operating is transparent mode VDOM2 is operating in NAT Route mode. There is an inter-VDOM link between both VDOMs. A client workstation with the IP address 10.0.1.10/24 is connected to port2. A web server with the IP address 10.200.1.2/24 is connected to port1. What is required in the FortiGate configuration to route and allow connections from the client workstation to the web server? (Choose two.)

  1. A static or dynamic route in VDOM2 with the subnet 10.0.1.0/24 as the destination.
  2. A static or dynamic route in VDOM1 with the subnet 10.200.1.0/24 as the destination.
  3. One firewall policy in VDOM1 with port2 as the source interface and InterVDOM0 as the destination interface.
  4. One firewall policy in VDOM2 with InterVDOM1 as the source interface and port1 as the destination interface.

Question 72

Which component of FortiOS performs application control inspection?

  1. Kernel
  2. Antivirus engine
  3. IPS engine
  4. Application control engine

Question 73

Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)

  1. They support GRE-over-IPsec.
  2. They can be configured in both NAT/Route and transparent operation modes.
  3. They require two firewall policies: one for each direction of traffic flow.
  4. They support L2TP-over-IPsec.

Question 74

What statement describes what DNS64 does?

  1. Converts DNS A record lookups to AAAA record lookups.
  2. Translates the destination IPv6 address of the DNS traffic to an IPv4 address.
  3. Synthesizes DNS AAAA records from A records.
  4. Translates the destination IPv4 address of the DNS traffic to an IPv6 address.

Question 75

What does the command diagnose debug fsso-polling refresh-user do?

  1. It refreshes user group information form any servers connected to the FortiGate using a collector agent.
  2. It refreshes all users learned through agentless polling.
  3. It displays status information and some statistics related with the polls done by FortiGate on each DC.
  4. It enables agentless polling mode real-time debug.