NSE4-5.4

NSE4-5.4 practice questions, page 9 of 23, with answer review and explanations.

Question 41

How does FortiGate verify the login credentials of a remote LDAP user?

  1. FortiGate sends the user entered credentials to the LDAP server for authentication.
  2. FortiGate re-generates the algorithm based on the login credentials and compares it against the algorithm stored on the LDAP server.
  3. FortiGate queries its own database for credentials.
  4. FortiGate queries the LDAP server for credentials.

Question 42

An administrator has enabled proxy-based antivirus scanning and configured the following settings: Which statement about the above configuration is true?

  1. Files bigger than 10 MB are not scanned for viruses and will be blocked.
  2. FortiGate scans only the first 10 MB of any file.
  3. Files bigger than 10 MB are sent to the heuristics engine for scanning.
  4. FortiGate scans the files in chunks of 10 MB.

Question 43

Examine this output from the diagnose sys top command: Which statements about the output are true? (Choose two.)

  1. sshd is the process consuming most memory
  2. sshd is the process consuming most CPU
  3. All the processes listed are in sleeping state
  4. The sshd process is using 123 pages of memory

Question 44

An administrator has created a custom IPS signature. Where does the custom IPS signature have to be applied?

  1. In an IPS sensor
  2. In an interface.
  3. In a DoS policy.
  4. In an application control profile.

Question 45

An administrator wants to configure a FortiGate as a DNS server. The FortiGate must use its DNS database first, and then relay all irresolvable queries to an external DNS server. Which of the following DNS method must you use?

  1. Non-recursive
  2. Recursive
  3. Forward to primary and secondary DNS
  4. Forward to system DNS