Free Fortinet NSE4-5.4 Exam Dumps Questions & Answers

Review the CLI configuration below for an IPS sensor and identify the correct statements regarding this configuration from the choices below. (Select all that apply.)

• A.  The sensor will reset all connections that match these signatures.
• B.  The sensor will log all server attacks for all operating systems.
• C.  The sensor will include a PCAP file with a trace of the matching packets in the log message of any matched signature.
• D.  The sensor will match all traffic from the address object `LINUX_SERVER'.
• E.  The sensor only filters which IPS signatures to apply to the selected firewall policy.

What are required to be the same for two FortiGate units to form an HA cluster? (Choose two)

• A.  Firmware.
• B.  Model.
• C.  System time zone.
• D.  Hostname.

Where are most of the security events logged?

• A.  Forward Traffic log
• B.  Alert log
• C.  Security log
• D.  Alert Monitoring Console
• E.  Event log

In NAT/Route mode when there is no matching firewall policy for traffic to be forwarded by the Firewall, which of the following statements describes the action taken on traffic?

• A.  The traffic is passed and logged.
• B.  The traffic is blocked.
• C.  The traffic is blocked and logged.
• D.  The traffic is passed.

Which of the following statements are correct regarding FortiGate virtual domains (VDOMs)? (Choose two)

• A.  Each VDOM can run different firmware versions.
• B.  VDOMs divide a single FortiGate unit into two or more independent firewall.
• C.  A management VDOM handles SNMP. logging, alert email and FortiGuard updates.
• D.  Administrative users with a 'super_admin' profile can administrate only one VDOM.