Online Access Free NSE4-5.4 Exam Questions

Which of the following statements are correct about the HA command diagnose sys ha reset- uptime? (Choose two.)

• A.The device this command is executed on is likely to switch from master to slave status if override is disabled.
• B.The device this command is executed on is likely to switch from master to slave status if override is enabled.
• C.This command has no impact on the HA algorithm.
• D.This command resets the uptime variable used in the HA algorithm so it may cause a new master to become elected.

Which statement best describes what a Fortinet System on a Chip (SoC) is?

• A.Low-power chip that provides general purpose processing power
• B.Light-version chip (with fewer features) of a CP processor
• C.Light-version chip (with fewer features) of an SP processor
• D.Chip that combines general purpose processing power with Fortinet's custom ASIC technology

View the exhibit.

The client cannot connect to the HTTP web server. The administrator run the FortiGate built-in sniffer and got the following output:

What should be done next to troubleshoot the problem?

• A.Run a sniffer in the web server.
• B.Execute another sniffer in the FortiGate, this time with the filter "host 10.0.1.10".
• C.Capture the traffic using an external sniffer connected to port1.
• D.Execute a debug flow.

Which of the following statements are characteristics of a FSSO solution using advanced access mode?
(Choose three.)

• A.Protection profiles can be applied to user groups only.
• B.Protection profiles can be applied to both individual users and user groups
• C.Usernames follow the Windows convention: Domain\username
• D.Nested or inherited groups are supported
• E.Usernames follow the LDAP convention: CN=User, OU=Name, DC=Domain

An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the
"Connect" button. The administrator has enabled split tunneling.

Given that the user authenticates against the SSL VPN policy shown in the image below, which statement below identifies the route that is added to the client's routing table.

• A.No route is added.
• B.A default route.
• C.A route to the destination matching the `all' address object.
• D.A route to destination matching the `WIN2K3' address object.