最新的Network Security認證 NSE4考試題庫

問題1

Which of the following are considered log types? (Choose three.)

A. Traffic log

B. Forward log

C. Syslog

D. Security log

E. Event log

正確答案: A,D,E

問題2

What are the advantages of FSSO DC mode over polling mode?

A. Allows transparent authentication.

B. Redundancy in the collector agent.

C. Scalability

D. DC agents are not required in the AD domain controllers.

正確答案: D

問題3

Which authentication scheme is not supported by the RADIUS implementation on
FortiGate?

A. FSSO

B. MSCHAP2

C. CHAP

D. PAP

正確答案: A

問題4

The exhibit is a screen shot of an Application Control profile.

Different settings are circled and numbered. Select the number identifying the setting which will provide additional information about YouTube access, such as the name of the video watched.

A. 1

B. 4

C. 5

D. 3

E. 2

正確答案: B

問題5

What methods can be used to deliver the token code to a user that is configured to use two-factor authentication? (Choose three.)

A. FortiToken.

B. Email.

C. SMS phone message.

D. Browser pop-up window.

E. Code books.

正確答案: A,B,C

問題6

Which header field can be used in a firewall policy for traffic matching?

A. ICMP type and code.

B. DSCP.

C. TCP sequence number.

D. TCP window size.

正確答案: A

問題7

What functions can the IPv6 Neighbor Discovery Protocol accomplish? (Choose two.)

A. Auto-adjust the MTU setting.

B. Negotiate the encryption parameters to use.

C. Determine other nodes reachability.

D. Autoconfigure addresses and prefixes.

正確答案: C,D

問題8

Which is NOT true about source matching with firewall policies?

A. A source user/group and device must be specified in the firewall policy.

B. A source interface must be selected in the firewall policy.

C. A source device may be defined in the firewall policy.

D. A source address object must be selected in the firewall policy.

E. A source user/group may be selected in the firewall policy.

正確答案: A

問題9

Which of the following statements are correct about NTLM authentication? (Choose three)

A. It must be supported by the domain controllers.

B. It must be supported by the user's browser.

C. NTLM negotiation starts between the FortiGate device and the user's browser.

D. It does not require a collector agent.

E. It does not require DC agents.

正確答案: A,B,C

問題10

What logging options are supported on a FortiGate unit? (Choose two.)

A. SNMP

B. FortiAnalyzer

C. LDAP

D. Syslog

正確答案: B,D

問題11

Review the IPsec phase 2 configuration shown in the exhibit; then answer the question below.

Which statements are correct regarding this configuration? (Choose two.)

A. There will be a DH exchange for each re-key.

B. Quick mode selectors will default to those used in the firewall policy.

C. The Phase 2 will re-key even if there is no traffic.

D. The sequence number of ESP packets received from the peer will not be checked.

正確答案: A,C

問題12

Which of the following statements are correct concerning IPsec dialup VPN configurations for FortiGate devices? (Choose two)

A. Main mode mist be used when there is no more than one IPsec dialup VPN configured on the same FortiGate device.

B. Peer ID must be used when there is more than one aggressive-mode IPsec dialup VPN on the same FortiGate device.

C. A FortiGate device with an IPsec VPN configured as dialup can initiate the tunnel connection to any remote IP address.

D. The FortiGate will automatically add a static route to the source quick mode selector address received from each remote peer.

正確答案: B,D

問題13

Which methods can FortiGate use to send a One Time Password (OTP) to Two-Factor
Authentication users? (Choose three.)

A. Web Portal

B. Software FortiToken (FortiToken mobile)

C. Email

D. USB Token

E. Hardware FortiToken

正確答案: B,C,E

問題14

Which of the following statements are correct concerning IKE mode config? (Choose two)

A. It can dynamically assign IP addresses to IPsec VPN clients.

B. It uses the ESP protocol.

C. It can be enabled in the phase 2 configuration.

D. It can dynamically assign DNS settings to IPsec VPN clients.

正確答案: A,D

問題15

When creating FortiGate administrative users, which configuration objects specify the account rights?

A. User groups.

B. Local-in policies.

C. Administrator profiles.

D. Remote access profiles.

正確答案: C

問題16

What attributes are always included in a log header? (Choose three.)

A. subtype

B. time

C. level

D. user

E. duration

F. policyid

正確答案: A,B,C

問題17

Files that are larger than the oversized limit are subjected to which Antivirus check?

A. Virus

B. Sandbox

C. Grayware

D. Heuristic

正確答案: B

問題18

What log type would indicate whether a VPN is going up or down?

A. Forward log

B. Syslog

C. Security log

D. Event log

正確答案: D

問題19

Review the configuration for FortiClient IPsec shown in the exhibit.

Which statement is correct regarding this configuration?

A. The connecting VPN client will connect in web portal mode and no route will be installed.

B. The connecting VPN client will install a route to a destination corresponding to the student internal address object.

C. The connecting VPN client will install a route to the 172.20.1.[1-5] address range.

D. The connecting VPN client will install a default route.

正確答案: B

最新的Fortinet Network Security Expert 4 Written Exam (400) - NSE4免費考試真題

最新更新

站內鏈接

聯系我們