NSE4-5.4

NSE4-5.4 practice questions, page 7 of 23, with answer review and explanations.

Question 31

Which statements about application control are true? (Choose two.)

  1. Enabling application control profile in a security profile enables application control for all the traffic flowing through the FortiGate.
  2. It cannot take an action on unknown applications.
  3. It can inspect encrypted traffic.
  4. It can identify traffic from known applications, even when they are using non-standard TCP/UDP ports.

Question 32

View the exhibit. The client cannot connect to the HTTP web server. The administrator run the FortiGate built-in sniffer and got the following output: What should be done next to troubleshoot the problem?

  1. Execute another sniffer in the FortiGate, this time with the filter ג€host 10.0.1.10ג€.
  2. Run a sniffer in the web server.
  3. Capture the traffic using an external sniffer connected to port1.
  4. Execute a debug flow.

Question 33

Which of the following statements about NTLM authentication are correct? (Choose two.)

  1. It is useful when users log in to DCs that are not monitored by a collector agent.
  2. It takes over as the primary authentication method when configured alongside FSSO.
  3. Multi-domain environments require DC agents on every domain controller.
  4. NTLM-enabled web browsers are required.

Question 34

What FortiGate feature can be used to allow IPv6 clients to connect to IPv4 servers?

  1. IPv6-over-IPv4 IPsec
  2. NAT64
  3. IPv4-over-IPv6 IPsec
  4. NAT66

Question 35

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

  1. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
  2. ADVPN is only supported with IKEv2.
  3. Tunnels are negotiated dynamically between spokes.
  4. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.