NSE4-5.4

An administrator needs to be able to view logs for application usage on your network. What configurations are required to ensure that FortiGate generates logs for application usage activity? (Choose two.)A . Enable a web filtering profile on the firewall policy.B . Create an application control policy.C . Enable logging...

Which traffic inspection features can be executed by a security processor (SP)? (Choose three.)A . TCP SYN proxyB . SIP session helperC . Proxy-based antivirusD . Attack signature matchingE . Flow-based web filteringView AnswerAnswer: C,D,E

Which statement is correct based on this configuration?A . The MAC address 00:0c:29:29:38:da belongs to the port1 interface.B . Access to the network is blocked for the devices with the MAC address 00:0c:29:29:38:da and the IP address 10.0.1.254.C . 00:0c:29:29:38:da is the virtual MAC address assigned to the secondary IP...

When using WPAD DNS method, what is the FQDN format that browsers use to query the DNS server?A . wpad.<local-domain>B . srv_tcp.wpad.<local-domain>C . srv_proxy.<local-domain>/wpad.datD . proxy.<local-domain>.wpadView AnswerAnswer: A

Which configuration objects can be selected for the Source filed of a firewall policy? (Choose two.)A . FQDN addressB . IP poolC . User or user groupD . Firewall serviceView AnswerAnswer: B,C

View the example routing table. Which route will be selected when trying to reach 10.20.30.254?A . 10.20.30.0/26 [10/0] via 172.20.168.254, port2B . The traffic will be dropped because it cannot be routed.C . 10.20.30.0/24 [10/0] via 172.20.167.254, port3D . 0.0.0.0/0 [10/0] via 172.20.121.2, port1View AnswerAnswer: C

Which statements about antivirus scanning using flow-based full scan are true? (Choose two.)A . The antivirus engine starts scanning a file after the last packet arrives.B . It does not support FortiSandbox inspection.C . FortiGate can insert the block replacement page during the first connection attempt only if a virus...

Which statement about this configuration is correct?A . The FortiGate generates spanning tree BPDU frames.B . The FortiGate device forwards received spanning tree BPDU frames.C . The FortiGate can block an interface if a layer-2 loop is detected.D . Ethernet layer-2 loops are likely to occur.View AnswerAnswer: B

Which statements about DNS filter profiles are true? (Choose two.)A . They can inspect HTTP traffic.B . They must be applied in firewall policies with SSL inspection enabled.C . They can block DNS request to known botnet command and control servers.D . They can redirect blocked requests to a specific...

Which component of FortiOS performs application control inspection?A . KernelB . Antivirus engineC . IPS engineD . Application control engineView AnswerAnswer: D