NSE4-5.4

NSE4-5.4 practice questions, page 20 of 23, with answer review and explanations.

Question 96

Which condition must be met to offload the encryption and decryption of IPsec traffic to an NP6 processor?

  1. Phase 2 must use an encryption algorithm supported by the NP6.
  2. Anti-replay must be disabled.
  3. IPsec traffic must not be inspected by a session helper.
  4. No content inspection can be applied to traffic that is going to be encrypted.

Question 97

What FortiGate feature can be used to prevent a cross-site scripting (XSS) attack?

  1. Web application firewall (WAF)
  2. DoS policies
  3. Rate based IPS signatures
  4. One-arm sniffer

Question 98

What is the purpose of the Policy Lookup feature?

  1. It searches the matching policy based on an input criteria.
  2. It enables hidden security profiles with full logging capabilities and generates Learning Reports based on an input criteria.
  3. It finds duplicate objects in firewall policies.
  4. It creates a new firewall policy based on an input criteria.

Question 99

View the exhibit. Which of the following statements are correct? (Choose two.)

  1. next-hop IP address is not required when configuring a static route that uses the wan-load balance interface.
  2. Sessions will be load-balanced based on source and destination IP addresses.
  3. Each member interface requires its own firewall policy to allow traffic.
  4. The wan-load-balance interface must be manually created.

Question 100

Examine the following web filtering log. Which statement about the log message is true?

  1. The action for the category Games is set to block.
  2. The usage quota for the IP address 10.0.1.10 has expired.
  3. The name of the applied web filter profile is default.
  4. The web site miniclip.com matches a static URL filter whose action is set to Warning.