最新的Fortinet Network Security Expert 4 Written Exam - FortiOS 5.4 - NSE4-5.4免費考試真題

A. "confidential data"

B. [confidential data]

C. i/confidential data/

D. /confidential data/i

A. All VDOMs must operate in the same mode.

B. Changing a VDOM operational mode requires a reboot of the FortiGate unit.

C. An admin account can be assigned to one VDOM or it can have access to all three VDOMs.

D. The FortiGate unit supports any combination of these VDOMs in NAT/Route and Transparent modes.

E. A license had to be purchased and applied to the FortiGate unit before VDOM mode could be enabled.

F. The FortiGate unit must be a model 1000 or above to support multiple VDOMs.

A. It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit.

B. It will connect to the Fortinet support site where the appropriate firmware version can be selected.

C. It will present a prompt to allow browsing to the location of the firmware file.

D. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.

A. Integrity of the backup file is protected since it cannot be easily modified when encrypted.

B. A copy of the encrypted backup file is automatically pushed to the FortiGuard Distribution Service (FDS) for disaster recovery purposes. If the backup file becomes corrupt it can be retrieved through FDS.

C. Fortinet Technical Support can recover forgotten passwords with a backdoor passphrase.

D. Protects details of the device's configuration settings from being discovered while the backup file is in transit. For example, transferred to a data centers for system recovery.

E. Prevents the backup file from becoming corrupted.

A. You must enable the Authentication setting on the firewall policy.

B. You must enable one or more protocols that support active authentication on a firewall policy.

C. You must place the firewall policy for active authentication before a firewall policy for passive authentication.

D. You must assign users to a group for active authentication.

A. Block

B. Warning

C. Allow

D. Exempt

E. Shape

A. An IP address is used to manage the FortiGate unit but this IP address is not associated with a specific interface.

B. The FortiGate unit uses private IP addresses on the internal network but hides them using address translation.

C. The FortiGate unit must use public IP addresses on the internal and external networks.

D. To manage the FortiGate unit, one of the interfaces must be designated as the management interface.
This interface may not be used for forwarding data.

A. Email

B. USB Token

C. Software FortiToken (FortiToken mobile)

D. Web Portal

E. Hardware FortiToken

A. Logs have a header and a body section.The header and body will have the same layout for every log message.

B. Logs have a header and a body section.The header will have the same layout for every log message.The body section will change layout from one type of log message to another.

C. Logs have a header and a body section.The header and body will change layout from one type of log message to another.

A. By using the CLI console window in the GUI.

B. By using a Telnet connection.

C. By using a direct connection to a serial console.

D. By using an SSH connection.

A. No appropriate operation mode exists

B. Transparent mode

C. NAT/route

D. NAT mode with an interface in one-arm sniffer mode

A. D-Uninterruptable Sleep

B. R-Running

C. S-Sleep

D. Z-Zombie

A. Packet encryption

B. SNMP access limits through access lists

C. MIB-based report uploads

D. Running SNMP service on a non-standard port is possible

A. Execute ping-options source 10.200.1.1.

B. Execute ping-options source 10.200.1.2

C. Execute ping-options source port1

D. Execute ping-options source 10.0.1.254