NSE4-5.4

NSE4-5.4 practice questions, page 19 of 23, with answer review and explanations.

Question 91

What FortiGate configuration is required to actively prompt users for credentials?

  1. You must enable one or more protocols that support active authentication on a firewall policy.
  2. You must assign users to a group for active authentication.
  3. You must place the firewall policy for active authentication before a firewall policy for passive authentication.
  4. You must enable the Authentication setting on the firewall policy.

Question 92

View the exhibit. In this scenario, FGT1 has the following routing table: S* 0. 0. 0. 0/0 [10/0] via 10. 40. 72. 2, port1 C 172. 16. 32. 0/24 is directly connected, port2 C 10. 40. 72. 0/30 is directly connected, port1 A user at 192.168.32.15 is trying to access the web server at 172.16.32.254. Which of the following statements best describe how the FortiGate will perform reverse path forwarding checks on this traffic? (Choose two.)

  1. Strict RPF check will deny the traffic.
  2. Strict RPF check will allow the traffic.
  3. Loose RPF check will allow the traffic.
  4. Loose RPF check will deny the traffic.

Question 93

View the exhibit. What does the log message indicate? (Choose two.)

  1. The log type is utm.
  2. 10.0.1.10 is the IP address for mind-surf.net.
  3. FortiGate blocked the traffic.
  4. Firewall policy ID 6 matched the traffic.

Question 94

Which election criterion is used to elect the primary FortiGate in a high availability (HA) cluster when override is enabled?

  1. uptime > priority > port monitor > serial number
  2. port monitor > uptime > priority >serial number
  3. priority > port monitor >uptime >serial number
  4. port monitor > priority > uptime >serial number

Question 95

View the exhibit. What does this exhibit represent?

  1. SSL handshake
  2. Interchanging digital certificates
  3. Certificate signing request (CSR)
  4. Inline SSL inspection