最新的Fortinet Network Security Expert 4 Written Exam - FortiOS 5.4 - NSE4-5.4免費考試真題

A. To synchronize the ARp tables in all the FortiGate Unis that are part of the HA cluster.

B. To notify the master unit about the physical MAC addresses of the slave units.

C. To notify the network switches that a new HA master unit has been elected.

D. To notify the master unit that the slave devices are still up and alive.

A. In an interface.

B. In an IPS sensor

C. In a DoS policy.

D. In an application control profile.

A. Traffic to botnet command and control (C&C) servers

B. SQL injection attacks

C. Traffic to inappropriate web sites

D. Server information disclosure attacks

E. Credit card data leaks

A. Two traffic log messages are generated.

B. No traffic log message is generated.

C. A log message is only generated if there is a security event.

D. One traffic log message is generated.

A. File TypE. Microsoft Office(msoffice)

B. File NamE. "*.pptx", "*.docx", "*.xlsx"

C. File NamE. "*.ppt", "*.doc", "*.xls"

D. File TypE. Archive(zip)

E. File TypE. Unknown Filetype(unknown)

A. check which applications are installed on workstations attempting to access the network.

B. customize application types in a similar way to adding custom IPS signatures.

C. enable AV scanning per application rather than per policy.

D. set a unique session-ttl for select applications.

A. All the aggressive mode dialup VPNs MUST accept connections from the same peer ID.

B. Each aggressive mode dialup MUST accept connections from different peer ID.

C. The peer ID setting must NOT be used.

D. Each peer ID MUST match the FQDN of each remote peer.

A. This user does not have permission to enable tunnel mode.Make sure that the tunnel mode widget has been added to that user's web portal.

B. Make sure that only Internet Explorer is used. All other browsers are unsupported.

C. This FortiGate unit may have multiple Internet connections.To avoid this problem, use the appropriate CLI command to bind the SSL VPN connection to the original incoming interface.

D. Check the SSL adaptor on the host machine.If necessary, uninstall and reinstall the adaptor from the tunnel mode portal.

A. One-arm sniffer

B. Rate based IPS signatures

C. DoS policies

D. Web application firewall (WAF)

A. subtype

B. time

C. level

D. user

E. duration

F. policyid

A. a distance equal to its desired weight for ECMP but all must have the same priority.

B. the same distance and same priority.

C. the same distance but each of them must be assigned a unique priority.

D. the same distance and the same weight.

A. port monitor > priority > uptime >serial number

B. port monitor > uptime > priority >serial number

C. priority > port monitor >uptime >serial number

D. uptime > priority > port monitor > serial number

A. Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.

B. All interfaces of the transparent mode FortiGate device must be on different IP subnets.

C. It permits inline traffic inspection and firewalling without changing the IP scheme of the network.

D. The FortiGate acts as transparent bridge and forwards traffic at Layer-2.

E. The transparent FortiGate is visible to network hosts in an IP traceroute.

A. It is NOT multicast traffic.

B. Session packets do NOT have an 802.1Q VLAN tag.

C. It does NOT require flow-based inspection.

D. It does NOT require proxy-based inspection.

E. Layer 4 protocol must be UDP, TCP, SCTP or ICMP.

A. Add the following entry to the Generic Field section of the Data Filter: service="!smtp".

B. When editing the chart, uncheck mlog to indicate that Mail Filtering data is being excluded when generating the chart.

C. When editing the chart, enter 'dns' in the Exclude Service field.

D. In the Service field of the Data Filter, type 25/smtp and select the NOT checkbox.