Online Access Free NSE4-5.4 Exam Questions

Which statements correctly describe transparent mode operation? (Choose three.)

• A.It permits inline traffic inspection and firewalling without changing the IP scheme of the network.
• B.All interfaces of the transparent mode FortiGate device must be on different IP subnets.
• C.Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.
• D.The transparent FortiGate is visible to network hosts in an IP traceroute.
• E.The FortiGate acts as transparent bridge and forwards traffic at Layer-2.

Examine the following output from the diagnose sys session list command:

Which statements are true regarding the session above? (Choose two.)

• A.Session Time-To-Live (TTL) was configured to 9 seconds.
• B.The FortiGate is not translating the TCP port numbers of the packets in this session.
• C.FortiGate is doing NAT of both the source and destination IP addresses on all packets coming from the
  192.168.1.110 address.
• D.The IP address 192.168.1.110 is being translated to 172.17.87.16.

How do you configure inline SSL inspection on a firewall policy? (Choose two.)

• A.Enable one or more proxy-based security profiles on the firewall policy.
• B.Execute the inline ssl inspection CLI command.
• C.Enable one or more flow-based security profiles on the firewall policy.
• D.Enable the SSL/SSH Inspection profile on the firewall policy.

Which methods can FortiGate use to send a One Time Password (OTP) to Two-Factor Authentication users?
(Choose three.)

• A.USB Token
• B.Software FortiToken (FortiToken mobile)
• C.Email
• D.Hardware FortiToken
• E.Web Portal

In NAT/Route mode when there is no matching firewall policy for traffic to be forwarded by the Firewall, which of the following statements describes the action taken on traffic?

• A.The traffic is passed.
• B.The traffic is blocked.
• C.The traffic is blocked and logged.
• D.The traffic is passed and logged.