NSE4-5.4 practice questions, page 17 of 23, with answer review and explanations.
Question 81
In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?
Client > primary FortiGate> secondary FortiGate> primary FortiGate> web server.
Client > secondary FortiGate> web server.
Client >secondary FortiGate> primary FortiGate> web server.
Client> primary FortiGate> secondary FortiGate> web server.
Question 82
A FortiGate is operating in NAT/Route mode and configured with two virtual LAN (VLAN) sub-interfaces added to the same physical interface. Which statement about the VLAN IDs in this scenario is true?
The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs.
The two VLAN sub-interfaces must have different VLAN IDs.
The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in the same subnet.
The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.
Question 83
Which of the following statements are true when using Web Proxy Auto-discovery Protocol (WPAD) with the DHCP discovery method? (Choose two.)
The browser sends a DHCPINFORM request to the DHCP server.
The browser will need to be preconfigured with the DHCP server's IP address.
The DHCP server provides the PAC file for download.
If the DHCP method fails, browsers will try the DNS method.
Question 84
What inspections are executed by the IPS engine? (Choose three.)
Application control
Flow-based data leak prevention
Proxy-based antispam
Flow-based web filtering
Proxy-based antivirus
Question 85
Examine the exhibit. A client workstation is connected to FortiGate port2. The Fortigate port1 is connected to an ISP router. Port2 and port3 are both configured as a software switch. What IP address must be configured in the workstation as the default gateway?