NSE4-5.4 practice questions, page 21 of 23, with answer review and explanations.
Question 101
Examine this output from a debug flow: Which statements about the output are correct? (Choose two.)
The packet was allowed by the firewall policy with the ID 00007fc0.
FortiGate routed the packet through port3.
FortiGate received a TCP SYN/ACK packet.
The source IP address of the packet was translated to 10.0.1.10.
Question 102
View the exhibit. Which users and user groups are allowed access to the network through captive portal?
Only individual usersג€"not groupsג€"defined in the captive portal configuration.
Groups defined in the captive portal configuration
All users
Users and groups defined in the firewall policy.
Question 103
Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?
To remove the NAT operation.
To generate logs
To finish any inspection operations.
To allow for out-of-order packets that could arrive after the FIN/ACK packets.
Question 104
An administrator has disabled Accept push updates under Antivirus & IPS Updates. Which statements is true when this setting is disabled?
The extreme database is disabled.
New AV definitions are not added to FortiGate as soon as they are releases by FortiGuard.
Administrators cannot manually upload new AV definitions to the FortiGate.
FortiGate does not send files to FortiSandbox for inspection.
Question 105
An administrator needs to create a tunnel mode SSLVPN to access an internal web server from the Internet. The web server is connected to port1. The Internet is connected to port2. Both interfaces belong to the VDOM named Corporation. What interface must be used as the source for the firewall policy that will allow this traffic?