Fortinet Network Security Expert 4 Written Exam - FortiOS 5.4 - NSE4-5.4무료 덤프문제 풀어보기

A. Hostname.

B. Model.

C. System time zone.

D. Firmware.

A. AH provides data integrity but no encryption.

B. AH provides strong data integrity but weak encryption.

C. AH does not support perfect forward secrecy.

D. AH does not provide any data integrity or encryption.

A. 172.168.0.1 - 172.168.0.10

B. 210.192.168.3 - 210.192.168.10

C. 210.192.168.1 - 210.192.168.4

D. All of the above.

A. It is not supported by Fortinet Technical Support.

B. It must start with the name

C. It must specify the protocol. Otherwise, it could accidentally match lower-layer protocols.

D. It must indicate whether the traffic flow is from the client or the server.

A. The command config system global does not exist in FortiGate.

B. The administrator must first enter the command edit global.

C. The administrator admin does not have the privileges required to configure global settings.

D. The global settings cannot be configured from the root VDOM context.

A. Telnet, UDP, NNTP, SMTP

B. HTTPS, HTTP, SSH, TELNET, PING, SNMP

C. FTP, HTTPS, NNTP, TCP, WINS

D. HTTP, NNTP, SMTP, DHCP

E. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS

A. Administrators can create the user accounts is a remote server and store the user passwords locally in the FortiGate.

B. Two-factor authentication can be enabled on a per user basis.

C. Both the usernames and passwords can be stored locally on the FortiGate

D. Local users are for administration accounts only and cannot be used to authenticate network users.

A. Are required to modify a firewall policy from the CLI.

B. Change when firewall policies are re-ordered.

C. Defines the order in which rules are processed.

D. Represent the number of objects used in the firewall policy.

A. A service that validates digital certificates for certificate-based authentication purposes

B. An entity that certifies that the information contained in a digital certificate is valid and true.

C. A service that provides a digital certificate each time a user is authenticating

D. The FortiGate process in charge of generating digital certificates on the fly for SSL inspection purposes

A. The FortiGate devices configured in transparent mode.

B. At least one firewall policy from port2 to port1 to allow outgoing traffic.

C. Static or dynamic IP addresses in both ForitGate interfaces port1 and port2.

D. A default route configured in the FortiGuard devices pointing to the ISP's router.

A. 2

B. 6

C. 3

D. 5

A. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.

B. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.

C. When the system has reached its capacity for log messages, the FortiGate unit will stop logging to memory.

D. None of the above.

A. The FortiGate is in Transparent mode.

B. The FortiGate is connected to multiple ISPs.

C. The external facing interface of the FortiGate is configured to get the IP address from a DHCP server.

D. FortiGuard scheduled updates are enabled in the FortiGate configuration.

A. Investigate configuration history

B. Investigate corrupted firmware

C. Investigate current runtime state

D. Investigate damaged hardware