NSE4-5.4

NSE4-5.4 practice questions, page 23 of 23, with answer review and explanations.

Question 111

View the exhibit. Which statements are correct, based on this output? (Choose two.)

  1. The FortiGate have three VDOMs.
  2. The all VDOM is not synchronized between the primary and secondary FortiGate.
  3. The global configuration is synchronized between the primary and secondary FortiGate.
  4. The root VDOM is not synchronized between the primary and secondary FortiGate.

Question 112

What IPv6 extension header can be used to provide encryption and data confidentiality?

  1. Mobility
  2. ESP
  3. Authentication
  4. Destination options

Question 113

Which two statements are true about IPsec VPNs and SSL VPNs? (Choose two.)

  1. SSL VPN creates a HTTPS connection. IPsec does not.
  2. Both SSL VPNs and IPsec VPNs are standard protocols.
  3. Either a SSL VPN or an IPsec VPN can be established between two FortiGate devices.
  4. Either a SSL VPN or an IPsec VPN can be established between an end-user workstation and a FortiGate device.

Question 114

Alert emails enable the FortiGate unit to send email notifications to an email address upon detection of a pre-defined event type. Which of the following are some of the available event types in Web Config? (Select all that apply.)

  1. Intrusion detected.
  2. Successful firewall authentication.
  3. Oversized file detected.
  4. DHCP address assigned.
  5. FortiGuard Web Filtering rating error detected.

Question 115

A user logs into a SSL VPN portal and activates the tunnel mode. The administrator has enabled split tunneling. The exhibit shows the firewall policy configuration: Which static route is automatically added to the client's routing table when the tunnel mode is activated?

  1. A route to a destination subnet matching the Internal_Servers address object.
  2. A route to the destination subnet configured in the tunnel mode widget.
  3. A default route.
  4. A route to the destination subnet configured in the SSL VPN global settings.