Fortinet NSE4-5.4 問題集

質問 1：
Of the following information, what can be recorded by a Data Leak Prevention sensor configured to do a summary archiving? (Choose three.)
A. Sender email address (for the case of SMTP traffic)
B. Recipient email address (for the case of SMTP traffic)
C. Visited URL (for the case of HTTP traffic)
D. Email body (for the case of SMTP traffic)
E. Attached file (for the case of SMTP traffic)
正解：A,B,D

質問 2：
Which of the following statement correct describes the use of the "diagnose sys ha reset- uptime" command?
A. To force an HA failover when the HA override setting is disabled.
B. To clear the HA counters.
C. To restart a FortiGate unit that is part of an HA cluster.
D. To force an HA failover when the HA override setting is enabled.
正解：A

質問 3：
Review the static route configuration for IPsec shown in the exhibit; then answer the question below.

Which statements are correct regarding this configuration? (Choose two.)
A. Interface remote is an IPsec interface.
B. A gateway address is not required because the interface is a point-to-point connection.
C. A gateway address is not required because the default route is used.
D. Interface remote is a zone.
正解：A,B

質問 4：
A FortiGate devices has two VDOMs in NAT/route mode. Which of the following solutions can be implemented by a network administrator to route traffic between the two VDOMs. (Choose two.)
A. Interconnect and configure an external physical interface in one VDOM to another physical interface in the second VDOM.
B. Configure both VDOMs to share the same table.
C. Manually create and configured an inter-VDOM link between yours.
D. Use the inter-VDOMs links automatically created between all VDOMS.
正解：A,C

質問 5：
Which operating system vulnerability can you protect when selecting signatures to include in an IPS sensor?
(Choose three)
A. Mac OS
B. QNIX
C. Linux
D. Irix
E. BSD
正解：A,C,E

質問 6：
For traffic that does match any configured firewall policy, what is the default action taken by the FortiGate?
A. The traffic is blocked and logged.
B. The traffic is blocked and no log is generated.
C. The traffic is allowed and no log is generated.
D. The traffic is allowed and logged.
正解：B

質問 7：
FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed.
What action must be taken for one of these profiles to become active?
A. The protection profile must be set as the Active Protection Profile.
B. The protection profile must be assigned to a firewall policy.
C. All of the above.
D. The "Use Protection Profile" option must be selected in the Web Config tool under the sections for AntiVirus, IPS, WebFilter, and AntiSpam.
正解：B

質問 8：
Which of the following statements are TRUE for Port Pairing and Forwarding Domains? (Select all that apply.)
A. They may contain physical and/or virtual interfaces.
B. They are only available in high-end models.
C. Port Pairing works only for physical interfaces.
D. They both create separate broadcast domains.
E. Forwarding Domains only apply to virtual interfaces.
正解：A,D