NSE4-5.4

NSE4-5.4 practice questions, page 5 of 23, with answer review and explanations.

Question 21

A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups. What is required in the SSL VPN configuration to meet these requirements?

  1. Two separated SSL VPNs in different interfaces of the same VDOM
  2. Different SSL VPN realms for each group
  3. Different virtual SSLVPN IP addresses for each group
  4. Two firewall policies with different captive portals

Question 22

Examine the routing database. Which of the following statements are correct? (Choose two.)

  1. The port3 default route has the lowest metric, making it the best route.
  2. There will be eight routes active in the routing table.
  3. The port3 default has a higher distance than the port1 and port2 default routes.
  4. Both port1 and port2 default routers are active in the routing table.

Question 23

View the exhibit. When a user attempts to connect to an HTTPS site, what is the expected result with this configuration?

  1. The user is required to authenticate before accessing sites with untrusted SSL certificates.
  2. The user is presented with certificate warnings when connecting to sites that have untrusted SSL certificates.
  3. The user is allowed access all sites with untrusted SSL certificates, without certificate warnings.
  4. The user is blocked from connecting to sites that have untrusted SSL certificates (no exception provided).

Question 24

View the exhibit. When Role is set to Undefined, which statement is true?

  1. The GUI provides all the configuration options available for the port1 interface.
  2. You cannot configure a static IP address for the port1 interface because it allows only DHCP addressing mode.
  3. Firewall policies can be created from only the port1 interface to any interface.
  4. The port1 interface is reserved for management only.

Question 25

Which statement is true regarding the policy ID numbers of firewall policies?

  1. Change when firewall policies are re-ordered.
  2. Defines the order in which rules are processed.
  3. Are required to modify a firewall policy from the CLI.
  4. Represent the number of objects used in the firewall policy.