Online Access Free NSE4 Exam Questions

Which statement is in advantage of using a hub and spoke IPsec VPN configuration instead of a fully-meshed set of IPsec tunnels?

• A.Using a hub and spoke topology uses stronger encryption protocols.
• B.Using a hub and spoke topology provides full redundancy.
• C.Using a hub and spoke topology requires fewer tunnels.
• D.Using a hub and spoke topology requires more routes.

Which statement is correct regarding virus scanning on a FortiGate unit?

• A.Virus scanning must be enabled in a security profile, which must be applied to a firewall policy.
• B.Fortinet customer support enables virus scanning remotely for you.
• C.Enabling virus scanning in a UTM security profile enables virus scanning for all traffic flowing through the FortiGate device.
• D.Virus scanning is enabled by default.

Which best describes the authentication timeout?

• A.How long a user is allowed to send and receive traffic before he or she must authenticate again.
• B.How long FortiGate waits for the user to enter his or her credentials.
• C.How long an authenticated user can be idle (without sending traffic) before they must authenticate again.
• D.How long a user-authenticated session can exist without having to authenticate again.

Which are valid replies from a RADIUS server to an ACCESS-REQUEST packet from a FortiGate? (Choose two.)

• A.ACCESS-RESTRICT
• B.ACCESS-PENDING
• C.ACCESS-REJECT
• D.ACCESS-CHALLENGE

Which firewall objects can be included in the Destination Address field of a firewall policy?
(Choose three.)

• A.MAC address.
• B.Virtual IP address.
• C.IP address.
• D.IP address pool.
• E.IP address group.