Online Access Free NSE4-5.4 Exam Questions

A FortiGate interface is configured with the following commands:

What statements about the configuration are correct? (Choose two.)

• A.FortiGate can send IPv6 router advertisements (RAs.)
• B.IPv6 clients connected to port1 can use SLAAC to generate their IPv6 addresses.
• C.FortiGate can provide IPv6 addresses to DHCPv6 client.
• D.FortiGate can provide DNS settings to IPv6 clients.

Which statements about IP-based explicit proxy authentication are true? (Choose two.)

• A.Sessions from the same source address are treated as a single user.
• B.IP-based authentication consumes less FortiGate's memory than session-based authentication.
• C.IP-based authentication is best suited to authenticating users behind a NAT device.
• D.FortiGate remembers authenticated sessions using browser cookies.

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

• A.The interface is a member of a virtual wire pair.
• B.The interface has been configured for one-arm sniffer.
• C.The interface is a member of a zone.
• D.The operation mode is transparent.
• E.Captive portal is enabled in the interface.

Which best describe the mechanism of a TCP SYN flood?

• A.The attacker keeps open many connections with slow data transmission so that other clients cannot start new connections.
• B.The attacker starts many connections, but never acknowledges to fully form them.
• C.The attacker sends a packet designed to "sync" with the FortiGate.
• D.The attacker sends a specially crafted malformed packet, intended to crash the target by exploiting its parser.

Which portion of the configuration does an administrator specify the type of IPsec configuration (either policy-based or route-based)?

• A.Under the phase 2 settings.
• B.Under the firewall policy settings.
• C.Under the phase 1 settings.
• D.Under the IPsec VPN global settings.