Exit demo NSE4 Fortinet Network Security Expert 4 Written Exam (400) PDF format · free preview

Fortinet NSE4 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/nse4.html

Question 1
Multiple choice

Which of the following statements are correct regarding SSL VPN Web-only mode? (Choose two.)

A.

It can only be used to connect to web services.

B.

IP traffic is encapsulated over HTTPS.

C.

Access to internal network resources is possible from the SSL VPN portal.

D.

The standalone FortiClient SSL VPN client CANNOT be used to establish a Web-only SSL VPN.

E.

It is not possible to connect to SSH servers through the VPN.

Question 2
Single choice

Which best describe the mechanism of a TCP SYN flood?

A.

The attacker keeps open many connections with slow data transmission so that other clients cannot start new connections.

B.

The attacker sends a packet designed to "sync" with the FortiGate.

C.

The attacker sends a specially crafted malformed packet, intended to crash the target by exploiting its parser.

D.

The attacker starts many connections, but never acknowledges to fully form them.

Question 3
Multiple choice

Which of the following statements must be true for a digital certificate to be valid? (Choose two.)

A.

It must be signed by a "trusted" CA

B.

It must be listed as valid in a Certificate Revocation List (CRL)

C.

The CA field must be "TRUE"

D.

It must be still within its validity period

Question 4
Single choice

What log type would indicate whether a VPN is going up or down?

A.

Event log

B.

Security log

C.

Forward log

D.

Syslog

Question 5
Multiple choice

A FortiGate devices is configured with four VDOMs: 'root' and 'vdom1' are in NAT/route mode; 'vdom2' and
'vdom2' are in transparent mode. The management VDOM is 'root'.

Which of the following statements are true? (Choose two.)

A.

An inter-VDOM link between 'root' and 'vdom1' can be created.

B.

An inter-VDOM link between 'vdom1' and vdom2' can created.

C.

An inter-VDOM link between 'vdom2' and vdom3' can created.

D.

Inter-VDOM link links must be manually configured for FortiGuard traffic.

Question 6
Multiple choice

What configuration objects are automatically added when using the FortiGate's FortiClient VPN Configurations Wizard?(Choose two)

A.

Static route

B.

Phase 1

C.

Users group

D.

Phase 2

Question 7
Single choice

Which of the following statements is correct concerning multiple vdoms configured in a FortiGate device?

A.

FortiGate devices,from the FGT/FWF 60D and above, all support VDOMS.

B.

All FortiGate devices scale to 250 VDOMS.

C.

Each VDOM requires its own FortiGuard license.

D.

FortiGate devices support more NAT/route VDOMs than Transparent Mode VDOMs.

Question 8
Multiple choice

The exhibit shows a part output of the diagnostic command 'diagnose debug application ike 255', taken during establishment of a VPN.

Which of the following statement are correct concerning this output? (choose two)

A.

The quick mode selectors negotiated between both IPsec VPN peers is 0.0.0.0/32 for both source and destination addresses.

B.

The output corresponds to a phase 2 negotiation

C.

NAT-T enabled and there is third device in the path performing NAT of the traffic between both IPsec
VPN peers.

D.

The IP address of the remote IPsec VPN peer is 172.20.187.114

Question 9
Multiple choice

Which of the following are possible actions for FortiGuard web category filtering? (Choose three.)

A.

Allow

B.

Block

C.

Exempt

D.

Warning

E.

Shape

Question 10
Multiple choice

Review the IPsec phase 2 configuration shown in the exhibit; then answer the question below.

Which statements are correct regarding this configuration? (Choose two.)

A.

The Phase 2 will re-key even if there is no traffic.

B.

There will be a DH exchange for each re-key.

C.

The sequence number of ESP packets received from the peer will not be checked.

D.

Quick mode selectors will default to those used in the firewall policy.

Showing 10 of 301 questions · Unlock the full set