NSE4-5.4 Exam Questions - Online Test

NSE4-5.4 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Certleader NSE4-5.4 Questions are updated and all NSE4-5.4 answers are verified by experts. Once you have completely prepared with our NSE4-5.4 exam prep kits you will be ready for the real NSE4-5.4 exam without a problem. We have Renewal Fortinet NSE4-5.4 dumps study guide. PASSED NSE4-5.4 First attempt! Here What I Did.

P.S. Tested NSE4-5.4 secret are available on Google Drive, GET MORE: https://drive.google.com/open?id=1xSlEaFFo1TkP1Im8lI2_FaBp164pASCS

New Fortinet NSE4-5.4 Exam Dumps Collection (Question 3 - Question 12)

Q1. Which statements about DNS filter profiles are true? (Choose two.)

A. They can inspect HTTP traffic.

B. They must be applied in firewall policies with SSL inspection enabled.

C. They can block DNS request to known botnet command and control servers.

D. They can redirect blocked requests to a specific portal.

Answer: C,D

Q2. View the exhibit.

Based on this output, which statements are correct? (Choose two.)

A. FortiGate generated an event log for system conserve mode.

B. FortiGate has entered in to system conserve mode.

C. By default, the FortiGate blocks new sessions.

D. FortiGate changed the global av-failopen settings to idledrop.

Answer: B,C

Q3. A FortiGate is operating in NAT/Route mode and configured with two virtual LAN (VLAN) sub-interfaces added to the same physical interface.

Which statement about the VLAN IDs in this scenario is true?

A. The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs.

B. The two VLAN sub-interfaces must have different VLAN IDs.

C. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in the same subnet.

D. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.

Answer: C

Q4. What step is required to configure an SSL VPN to access to an internal server using port forward mode?

A. Configure the virtual IP addresses to be assigned to the SSL VPN users.

B. Install FortiClient SSL VPN client

C. Create a SSL VPN realm reserved for clients using port forward mode.

D. Configure the client application to forward IP traffic to a Java applet proxy.

Answer: D

Q5. An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to SSL VPN. How can this be achieved?

A. Disabling split tunneling

B. Configuring web bookmarks

C. Assigning public IP addresses to SSL VPN clients

D. Using web-only mode

Answer: A

Q6. View the exhibit.

Which of the following statements are correct? (Choose two.)

A. This is a redundant IPsec setup.

B. The TunnelB route is the primary one for searching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

C. This setup requires at least two firewall policies with action set to IPsec.

D. Dead peer detection must be disabled to support this type of IPsec setup.

Answer: A,B

Q7. An administrator has configured two VLAN interfaces:

A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface. However, the DHCP client cannot get a dynamic IP address from the DHCP server. What is the cause of the problem?

A. Both interfaces must be in different VDOMs

B. Both interfaces must have the same VLAN ID.

C. The role of the VLAN10 interface must be set to server.

D. Both interfaces must belong to the same forward domain.

Answer: D

Q8. Which of the following statements about NTLM authentication are correct? (Choose two.)

A. It is useful when users log in to DCs that are not monitored by a collector agent.

B. It takes over as the primary authentication method when configured alongside FSSO.

C. Multi-domain environments require DC agents on every domain controller.

D. NTLM-enabled web browsers are required.

Answer: A,C

Q9. View the exhibit.

When a user attempts to connect to an HTTPS site, what is the expected result with this configuration?

A. The user is required to authenticate before accessing sites with untrusted SSL certificates.

B. The user is presented with certificate warnings when connecting to sites that have untrusted SSL certificates.

C. The user is allowed access all sites with untrusted SSL certificates, without certificate warnings.

D. The user is blocked from connecting to sites that have untrusted SSL certificates (no exception provided).

Answer: B

Q10. An administrator needs to offload logging to FortiAnalyzer from a FortiGate with an internal hard drive. Which statements are true? (Choose two.)

A. Logs must be stored on FortiGate first, before transmitting to FortiAnalyzer

B. FortiGate uses port 8080 for log transmission

C. Log messages are transmitted as plain text in LZ4 compressed format (store-and-upload method).

D. FortiGate can encrypt communications using SSL encrypted OFTP traffic.

Answer: A,C

P.S. Easily pass NSE4-5.4 Exam with Examcollectionplus Tested Dumps & pdf vce, Try Free: https://www.examcollectionplus.net/vce-NSE4-5.4/ ( New Questions)