NSE4-5.4

NSE4-5.4 practice questions, page 18 of 23, with answer review and explanations.

Question 86

Which of the following statements about the FSSO collector agent timers is true?

  1. The dead entry timeout interval is used to age out entries with an unverified status.
  2. The workstation verify interval is used to periodically check if a workstation is still a domain member.
  3. The user group cache expiry is used to age out the monitored groups.
  4. The IP address change verify interval monitors the server IP address where the collector agent is installed, and updates the collector agent configuration if it changes.

Question 87

An administrator has enabled the DHCP Server on the port1 interface and configured the following based on the exhibit. Which statement is correct based on this configuration?

  1. The MAC address 00:0c:29:29:38:da belongs to the port1 interface.
  2. Access to the network is blocked for the devices with the MAC address 00:0c:29:29:38:da and the IP address 10.0.1.254.
  3. 00:0c:29:29:38:da is the virtual MAC address assigned to the secondary IP address (10.0.1.254) of the port1 interface.
  4. The IP address 10.0.1.254 is reserves for the device with the MAC address 00:0c:29:29:38:da.

Question 88

An administrator wants to create a policy-based IPsec VPN tunnel between two FortiGate devices. Which configuration steps must be performed on both units to support this scenario? (Choose three.)

  1. Define the phase 2 parameters.
  2. Set the phase 2 encapsulation method to transport mode.
  3. Define at least one firewall policy, with the action set to IPsec.
  4. Define a route to the remote network over the IPsec tunnel.
  5. Define the phase 1 parameters, without enabling IPsec interface mode.

Question 89

View the Exhibit. Which statements are correct based on this output? (Choose two.)

  1. The global configuration is synchronized between the primary and secondary FortiGate.
  2. The all VDOM is not synchronized between the primary and secondary FortiGate.
  3. The root VDOM is not synchronized between the primary and secondary FortiGate.
  4. The FortiGates have three VDOMs.

Question 90

Which of the following statements about web caching are true? (Choose two.)

  1. Web caching slows down web browsing due to constant read-write cycles from FortiGate memory.
  2. When a client makes a web request, the proxy checks if the requested URL is already in memory.
  3. Only heavy content is cached, for example, videos, images, audio and so on.
  4. Web caching is supported in both explicit and implicit proxy.