Online Access Free NSE4 Exam Questions

A client can create a secure connection to a FortiGate device using SSL VPN in web-only mode. Which one of the following statements is correct regarding the use of web-only mode SSL VPN?

• A.Web-only mode supports SSL version 3 only.
• B.A Fortinet-supplied plug-in is required on the web client to use web-only mode SSL
  VPN.
• C.Web-only mode requires the user to have a web browser that supports 64-bit cipher length.
• D.The JAVA run-time environment must be installed on the client to be able to connect to a web-only mode SSL VPN.

What are valid options for handling DNS requests sent directly to a FortiGate's interface
IP? (Choose three.)

• A.Conditional-forward.
• B.Non-recursive.
• C.Iterative.
• D.Recursive.
• E.Forward-only.

FSSO provides a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows active directory.
Which of the following statements are correct regarding FSSO in a Windows domain environment when DC-agent mode is used? (Choose two.)

• A.The FSSO collector agent will receive user logon information from the domain controller agent and will send it to the FortiGate unit.
• B.An FSSO domain controller agent must be installed on every domain controller.
• C.An FSSO collector agent must be installed on every domain controller.
• D.The FSSO domain controller agent will regularly update user logon information on the
  FortiGate unit.

Which action is taken by the FortiGate device when a file matches more than one rule in a
Data Leak Prevention sensor?

• A.The actions specified in the first rule from top to bottom
• B.All actions specified by all the matched rules.
• C.The actions specified by the rule that most specifically matched the file
• D.The actions specified in the rule with the higher priority number

Which statement concerning IPS is false?

• A.IPS can detect zero-day attacks.
• B.The status of the last service update attempt from FortiGuard IPS is shown on
  System>Config>FortiGuard and in output from 'diag autoupdate version'
• C.IPS packages contain an engine and signatures used by both IPS and other flow-based scans.
• D.One-arm topology with sniffer mode improves performance of IPS blocking.