NSE4-5.4 | A Review Of Realistic NSE4-5.4 exam dumps

New Questions 2

View the exhibit.

Based on this output, which statements are correct? (Choose two.)

A. FortiGate generated an event log for system conserve mode.

B. FortiGate has entered in to system conserve mode.

C. By default, the FortiGate blocks new sessions.

D. FortiGate changed the global av-failopen settings to idledrop.

Answer: B,C

New Questions 3

Why must you use aggressive mode when a local FortiGate IPsec gateway hosts multiple dialup tunnels?

A. The FortiGate is able to handle NATed connections only with aggressive mode.

B. FortiClient supports aggressive mode.

C. The remote peers are able to provide their peer IDs in the first message with aggressive mode.

D. Main mode does not support XAuth for user authentication.

Answer: B

New Questions 4

When using WPAD DNS method, what is the FQDN format that browsers use to query the DNS server?

A. wpad.<local-domain>

B. srv_tcp.wpad.<local-domain>

C. srv_proxy.<local-domain>/wpad.dat

D. proxy.<local-domain>.wpad

Answer: A

New Questions 5

Which statements about IP-based explicit proxy authentication are true? (Choose two.)

A. IP-based authentication is best suited to authenticating users behind a NAT device.

B. Sessions from the same source address are treated as a single user.

C. IP-based authentication consumes less FortiGateu2021s memory than session-based authentication.

D. FortiGate remembers authenticated sessions using browser cookies.

Answer: B,C

New Questions 6

An administrator needs to offload logging to FortiAnalyzer from a FortiGate with an internal hard drive. Which statements are true? (Choose two.)

A. Logs must be stored on FortiGate first, before transmitting to FortiAnalyzer

B. FortiGate uses port 8080 for log transmission

C. Log messages are transmitted as plain text in LZ4 compressed format (store-and-upload method).

D. FortiGate can encrypt communications using SSL encrypted OFTP traffic.

Answer: A,C

New Questions 7

View the exhibit.

When a user attempts to connect to an HTTPS site, what is the expected result with this configuration?

A. The user is required to authenticate before accessing sites with untrusted SSL certificates.

B. The user is presented with certificate warnings when connecting to sites that have untrusted SSL certificates.

C. The user is allowed access all sites with untrusted SSL certificates, without certificate warnings.

D. The user is blocked from connecting to sites that have untrusted SSL certificates (no exception provided).

Answer: B

New Questions 8

Examine the exhibit, which contains a virtual IP and a firewall policy configuration.

The WAN(port1) interface has the IP address 10.200.1.1/24. The LAN(port2) interface has the IP address 10.0.1.254/24.

The top firewall policy has NAT enabled using outgoing interface address. The second firewall policy configured with a virtual IP (VIP) as the destination address.

Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

A. 10.200.1.1

B. 10.0.1.254

C. Any available IP address in the WAN(port1) subnet 10.200.1.0/24

D. 10.200.1.10

Answer: A

New Questions 9

An administrator has configured two VLAN interfaces:

A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface. However, the DHCP client cannot get a dynamic IP address from the DHCP server. What is the cause of the problem?

A. Both interfaces must be in different VDOMs

B. Both interfaces must have the same VLAN ID.

C. The role of the VLAN10 interface must be set to server.

D. Both interfaces must belong to the same forward domain.

Answer: D

New Questions 10

Which statement about this configuration is correct?

A. The FortiGate generates spanning tree BPDU frames.

B. The FortiGate device forwards received spanning tree BPDU frames.

C. The FortiGate can block an interface if a layer-2 loop is detected.

D. Ethernet layer-2 loops are likely to occur.

Answer: B

New Questions 11

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

A. The FortiGate unitu2021s public IP address

B. The FortiGate unitu2021s internal IP address

C. The remote useru2021s virtual IP address

D. The remote useru2021s public IP address

Answer: B