Online Access Free NSE4-5.4 Exam Questions

Which statement regarding the firewall policy authentication timeout is true?

• A.It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.
• B.It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.
• C.It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.
• D.It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.

Which one of the following statements is correct about raw log messages?

• A.Logs have a header and a body section.The header and body will have the same layout for every log message.
• B.Logs have a header and a body section.The header will have the same layout for every log message.The body section will change layout from one type of log message to another.
• C.Logs have a header and a body section.The header and body will change layout from one type of log message to another.

Which statements about One-to-One IP pool are true? (Choose two.)

• A.It allows configuration of ARP replies.
• B.It allows fixed mapping of an internal address range to an external address range.
• C.It is used for destination NAT.
• D.It does not use port address translation.

View the example routing table.

Which route will be selected when trying to reach 10.20.30.254?

• A.10.20.30.0/26 [10/0] via 172.20.168.254, port2
• B.0.0.0.0/0 [10/0] via 172.20.121.2, port1
• C.10.20.30.0/24 [10/0] via 172.20.167.254, port3
• D.The traffic will be dropped because it cannot be routed.

Review the output of the command get router info routing-table database shown in the exhibit below; then answer the question following it.

Which two statements are correct regarding this output? (Choose two.)

• A.There will be seven routes in the routing table.
• B.There will be six routes in the routing table.
• C.There will be two routes for the 10.0.2.0/24 subnet in the routing table.
• D.There will be two default routes in the routing table.