NSE4-5.4

NSE4-5.4 practice questions, page 6 of 23, with answer review and explanations.

Question 26

An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to SSL VPN. How can this be achieved?

  1. Disabling split tunneling
  2. Configuring web bookmarks
  3. Assigning public IP addresses to SSL VPN clients
  4. Using web-only mode

Question 27

Which traffic inspection features can be executed by a security processor (SP)? (Choose three.)

  1. TCP SYN proxy
  2. SIP session helper
  3. Proxy-based antivirus
  4. Attack signature matching
  5. Flow-based web filtering

Question 28

An administrator has configured two VLAN interfaces: A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface. However, the DHCP client cannot get a dynamic IP address from the DHCP server. What is the cause of the problem?

  1. Both interfaces must be in different VDOMs
  2. Both interfaces must have the same VLAN ID.
  3. The role of the VLAN10 interface must be set to server.
  4. Both interfaces must belong to the same forward domain.

Question 29

View the exhibit. A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting.Games). Based on this configuration, which statement is true?

  1. Addicting.Games is allowed based on the Application Overrides configuration.
  2. Addicting.Games is blocked based on the Filter Overrides configuration.
  3. Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.
  4. Addicting.Games is allowed based on the Categories configuration.

Question 30

What are the purposes of NAT traversal in IPsec? (Choose two.)

  1. To detect intermediary NAT devices in the tunnel path.
  2. To encapsulate ESP packets in UDP packets using port 4500.
  3. To force a new DH exchange with each phase 2 re-key
  4. To dynamically change phase 1 negotiation mode to Aggressive.