NSE4-5.4

NSE4-5.4 practice questions, page 3 of 23, with answer review and explanations.

Question 11

View the example routing table. Which route will be selected when trying to reach 10.20.30.254?

  1. 10.20.30.0/26 [10/0] via 172.20.168.254, port2
  2. The traffic will be dropped because it cannot be routed.
  3. 10.20.30.0/24 [10/0] via 172.20.167.254, port3
  4. 0.0.0.0/0 [10/0] via 172.20.121.2, port1

Question 12

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

  1. The FortiGate unit's public IP address
  2. The FortiGate unit's internal IP address
  3. The remote user's virtual IP address
  4. The remote user's public IP address

Question 13

What is FortiGate's behavior when local disk logging is disabled?

  1. Only real-time logs appear on the FortiGate dashboard.
  2. No logs are generated.
  3. Alert emails are disabled.
  4. Remote logging is automatically enabled.

Question 14

What traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

  1. Traffic to inappropriate web sites
  2. SQL injection attacks
  3. Server information disclosure attacks
  4. Credit card data leaks
  5. Traffic to botnet command and control (C&C) servers

Question 15

Which statements about One-to-One IP pool are true? (Choose two.)

  1. It allows configuration of ARP replies.
  2. It allows fixed mapping of an internal address range to an external address range.
  3. It is used for destination NAT.
  4. It does not use port address translation.