Online Access Free NSE4 Exam Questions

Which antivirus inspection mode must be used to scan SMTP, FTP, POP3 and SMB protocols?

• A.Proxy-based.
• B.Flow-based.
• C.Man-in-the-middle.
• D.DNS-based.

Which of the following statements best describes what the Document Fingerprinting feature is for?

• A.Appends a fingerprint signature to all the emails sent by users
• B.Protects sensitive documents from leakage
• C.Validates the fingerprint signature in users' emails
• D.Appends a fingerprint signature to all documents sent by users

Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE.
Exhibit A shows the command output of diagnose sys session stat for the STUDENT device. Exhibit B shows the command output of diagnose sys session stat for the REMOTE device.
Exhibit A:

Exhibit B:

Given the information provided in the exhibits, which of the following statements are correct? (Choose two.)

• A.The cluster mode is active-passive.
• B.Session-pickup is likely to be enabled.
• C.STUDENT is likely to be the master device.
• D.There is not enough information to determine the cluster mode.

A new version of FortiOS firmware has just been released. When you upload new firmware, which is true?

• A.No settings are preserved. After the upgrade, you must upload a configuration backup file. FortiOS will ignore any commands that are not valid in the new OS. In those cases, you must reconfigure settings that are not compatible with the new firmware.
• B.No settings are preserved. You must completely reconfigure.
• C.If you upload the firmware image via the boot loader's menu from a TFTP server, it will not preserve the configuration. But if you upload new firmware via the GUI or CLI, as long as you are following a supported upgrade path, FortiOS will attempt to convert the existing configuration to be valid with any new or changed syntax.
• D.You must use FortiConverter to convert a backup configuration file into the syntax required by the new FortiOS, then upload it to FortiGate.

Which two statements are true about IPsec VPNs and SSL VPNs? (Choose two.)

• A.SSL VPN creates a HTTPS connection. IPsec does not.
• B.Either a SSL VPN or an IPsec VPN can be established between two FortiGate devices.
• C.Both SSL VPNs and IPsec VPNs are standard protocols.
• D.Either a SSL VPN or an IPsec VPN can be established between an end-user workstation and a FortiGate device.