NSE4-5.4

NSE4-5.4 practice questions, page 8 of 23, with answer review and explanations.

Question 36

View the exhibit. Which statements about the exhibit are true? (Choose two.)

  1. port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.
  2. port1-VLAN1 is the native VLAN for the port1 physical interface.
  3. Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.
  4. Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.

Question 37

Which statement about the firewall policy authentication timeout is true?

  1. It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this times expires.
  2. It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this times expires.
  3. It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the user's source MAC address.
  4. It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the user's source IP.

Question 38

Which of the following settings and protocols can be used to provide secure and restrictive administrative access to FortiGate? (Choose three.)

  1. Trusted host
  2. HTTPS
  3. Trusted authentication
  4. SSH
  5. FortiTelemetry

Question 39

If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does the FortiGate take?

  1. It blocks all future traffic for that IP address for a configured interval.
  2. It archives the data for that IP address.
  3. It provides a DLP block replacement page with a link to download the file.
  4. It notifies the administrator by sending an email.

Question 40

How can a browser trust a web-server certificate signed by a third party CA?

  1. The browser must have the CA certificate that signed the web-server certificate installed.
  2. The browser must have the web-server certificate installed.
  3. The browser must have the private key of CA certificate that signed the web-browser certificate installed.
  4. The browser must have the public key of the web-server certificate installed.