Online Access Free NSE4 Exam Questions

Which of the following statements are true regarding DLP File Type Filtering? (Choose two.)

• A.Filters based on file content
• B.Filters based on fingerprints
• C.Filters based on file extension
• D.File types are hard coded in the FortiOS

Which of the following items is NOT a packet characteristic matched by a firewall service object?

• A.TCP/UDP source and destination ports
• B.TCP sequence number
• C.ICMP type and code
• D.IP protocol number

If you enable the option "Generate Logs when Session Starts", what effect does this have on the number of traffic log messages generated for each session?

• A.A log message is only generated if there is a security event.
• B.Two traffic log messages are generated.
• C.One traffic log message is generated.
• D.No traffic log message is generated.

Which of the following statements are true about the SSL Proxy certificate that must be used for SSL Content Inspection? (Choose two.)

• A.It cannot be signed by a private CA
• B.It must be installed in the FortiGate device
• C.The subject filed must contain either the FQDN, or the IP address of the FortiGate device
• D.It must have either the field "CA=True" or the filed "Key Usage=KeyCertSign"

Which of the following statements best describes what a Certificate Signing Request (CSR) is?

• A.An enquiry submitted to a Certificate Authority (CA) to request a signed digital certificate
• B.An enquiry submitted to a Certificate Authority (CA) to request a root CA certificate
• C.An enquiry submitted to a Certificate Authority (CA) to request a Certificate Revocation
  List (CRL)
• D.A message sent by the Certificate Authority (CA) that contains a signed digital certificate.