{"id":1288,"date":"2018-09-27T09:48:19","date_gmt":"2018-09-27T09:48:19","guid":{"rendered":"https:\/\/dumps.dumpsbase.com\/?p=1288"},"modified":"2019-03-04T07:12:57","modified_gmt":"2019-03-04T07:12:57","slug":"real-fortinet-fortios-5-4-nse4-5-4-exam-questions","status":"publish","type":"post","link":"https:\/\/www.dumpsbase.com\/freedumps\/real-fortinet-fortios-5-4-nse4-5-4-exam-questions.html","title":{"rendered":"Real Fortinet FortiOS 5.4 NSE4-5.4 Exam Questions"},"content":{"rendered":"<p>Fortinet FortiOS 5.4 NSE4-5.4 exam, as a hot exam for NSE4 exam, recognizes your ability to install and manage the day-to-day configuration, monitoring, and operation of a FortiGate device to support specific corporate network security policies. However, passing NSE4-5.4 exam is not an easy task, Dumpsbase Real Fortinet FortiOS 5.4 NSE4-5.4 Exam Questions will be your best materials for Fortinet Network Security Expert 4 Written Exam &#8211; FortiOS 5.4 exam.<\/p>\n<p>Before taking Dumpsbase Real Fortinet FortiOS 5.4 NSE4-5.4 Exam Questions, checking the free demo questions as showing:<\/p>\n<h2><span style=\"color: #ff6600;\"><em>Real Fortinet FortiOS 5.4 NSE4-5.4 Exam Questions<\/em><\/span><\/h2>\n<script>\n\t  window.fbAsyncInit = function() {\n\t    FB.init({\n\t      appId            : '622169541470367',\n\t      autoLogAppEvents : true,\n\t      xfbml            : true,\n\t      version          : 'v3.1'\n\t    });\n\t  };\n\t\n\t  (function(d, s, id){\n\t     var js, fjs = d.getElementsByTagName(s)[0];\n\t     if (d.getElementById(id)) {return;}\n\t     js = d.createElement(s); js.id = id;\n\t     js.src = \"https:\/\/connect.facebook.net\/en_US\/sdk.js\";\n\t     fjs.parentNode.insertBefore(js, fjs);\n\t   }(document, 'script', 'facebook-jssdk'));\n\t<\/script><script type=\"text\/javascript\" >\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \nif(!window.jQuery) alert(\"The important jQuery library is not properly loaded in your site. Your WordPress theme is probably missing the essential wp_head() call. You can switch to another theme and you will see that the plugin works fine and this notice disappears. If you are still not sure what to do you can contact us for help.\");\n});\n<\/script>  \n  \n<div  id=\"watupro_quiz\" class=\"quiz-area single-page-quiz\">\n<p id=\"submittingExam546\" style=\"display:none;text-align:center;\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\"><\/p>\n\n<div class=\"watupro-exam-description\" id=\"description-quiz-546\"><\/div>\n\n<form action=\"\" method=\"post\" class=\"quiz-form\" id=\"quiz-546\"  enctype=\"multipart\/form-data\" >\n<div class='watu-question ' id='question-1' style=';'><div id='questionWrap-1'  class='   watupro-question-id-11764'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>1. <\/span>A FortiGate interface is configured with the following commands: <br \/>\r<br><br><img decoding=\"async\" width=322 height=187 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image002.jpg\" v:shapes=\"_x0000_i1025\"><br><br \/>\r<br>What statements about the configuration are correct? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_1' value='11764' \/><input type='hidden' id='answerType11764' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11764[]' id='answer-id-48532' class='answer   answerof-11764 ' value='48532'   \/><label for='answer-id-48532' id='answer-label-48532' class=' answer'><span>IPv6 clients connected to port1can use SLAAC to generate their IPv6 addresses.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11764[]' id='answer-id-48533' class='answer   answerof-11764 ' value='48533'   \/><label for='answer-id-48533' id='answer-label-48533' class=' answer'><span>FortiGate can provide DNS settings to IPv6 clients.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11764[]' id='answer-id-48534' class='answer   answerof-11764 ' value='48534'   \/><label for='answer-id-48534' id='answer-label-48534' class=' answer'><span>FortiGate can send IPv6 router advertisements (RAs.)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11764[]' id='answer-id-48535' class='answer   answerof-11764 ' value='48535'   \/><label for='answer-id-48535' id='answer-label-48535' class=' answer'><span>FortiGate can provide IPv6 addresses to DHCPv6 client.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-2' style=';'><div id='questionWrap-2'  class='   watupro-question-id-11765'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>2. <\/span>Which of the following Fortinet hardware accelerators can be used to offload flow-based antivirus inspection? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_2' value='11765' \/><input type='hidden' id='answerType11765' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11765[]' id='answer-id-48536' class='answer   answerof-11765 ' value='48536'   \/><label for='answer-id-48536' id='answer-label-48536' class=' answer'><span>SP3<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11765[]' id='answer-id-48537' class='answer   answerof-11765 ' value='48537'   \/><label for='answer-id-48537' id='answer-label-48537' class=' answer'><span>CP8<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11765[]' id='answer-id-48538' class='answer   answerof-11765 ' value='48538'   \/><label for='answer-id-48538' id='answer-label-48538' class=' answer'><span>NP4<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11765[]' id='answer-id-48539' class='answer   answerof-11765 ' value='48539'   \/><label for='answer-id-48539' id='answer-label-48539' class=' answer'><span>NP6<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-3' style=';'><div id='questionWrap-3'  class='   watupro-question-id-11766'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>3. <\/span>Under what circumstance would you enable LEARN as the Action on a firewall policy?<\/div><input type='hidden' name='question_id[]' id='qID_3' value='11766' \/><input type='hidden' id='answerType11766' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11766[]' id='answer-id-48540' class='answer   answerof-11766 ' value='48540'   \/><label for='answer-id-48540' id='answer-label-48540' class=' answer'><span>You want FortiGate to compile security feature activity from various security-related logs, such as virus and attack logs.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11766[]' id='answer-id-48541' class='answer   answerof-11766 ' value='48541'   \/><label for='answer-id-48541' id='answer-label-48541' class=' answer'><span>You want FortiGate to monitor a specific security profile in a firewall policy, and provide recommendations for that profile.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11766[]' id='answer-id-48542' class='answer   answerof-11766 ' value='48542'   \/><label for='answer-id-48542' id='answer-label-48542' class=' answer'><span>You want to capture data across all traffic and security vectors, and receive learning logs and a report with recommendations.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11766[]' id='answer-id-48543' class='answer   answerof-11766 ' value='48543'   \/><label for='answer-id-48543' id='answer-label-48543' class=' answer'><span>You want FortiGate to automatically modify your firewall policies as it learns your networking behavior.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-4' style=';'><div id='questionWrap-4'  class='   watupro-question-id-11767'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>4. <\/span>What methods can be used to deliver the token code to a user who is configured to use two-factor authentication? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_4' value='11767' \/><input type='hidden' id='answerType11767' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11767[]' id='answer-id-48544' class='answer   answerof-11767 ' value='48544'   \/><label for='answer-id-48544' id='answer-label-48544' class=' answer'><span>Code blocks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11767[]' id='answer-id-48545' class='answer   answerof-11767 ' value='48545'   \/><label for='answer-id-48545' id='answer-label-48545' class=' answer'><span>SMS phone message<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11767[]' id='answer-id-48546' class='answer   answerof-11767 ' value='48546'   \/><label for='answer-id-48546' id='answer-label-48546' class=' answer'><span>FortiToken<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11767[]' id='answer-id-48547' class='answer   answerof-11767 ' value='48547'   \/><label for='answer-id-48547' id='answer-label-48547' class=' answer'><span>Browser pop-up window<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11767[]' id='answer-id-48548' class='answer   answerof-11767 ' value='48548'   \/><label for='answer-id-48548' id='answer-label-48548' class=' answer'><span>Email<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-5' style=';'><div id='questionWrap-5'  class='   watupro-question-id-11768'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>5. <\/span>You are tasked to architect a new IPsec deployment with the following criteria: <br \/>\r<br>- There are two HQ sites that all satellite offices must connect to. <br \/>\r<br>- The satellite offices do not need to communicate directly with other satellite offices. <br \/>\r<br>- No dynamic routing will be used. <br \/>\r<br>- The design should minimize the number of tunnels being configured. <br \/>\r<br>Which topology should be used to satisfy all of the requirements?<\/div><input type='hidden' name='question_id[]' id='qID_5' value='11768' \/><input type='hidden' id='answerType11768' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11768[]' id='answer-id-48549' class='answer   answerof-11768 ' value='48549'   \/><label for='answer-id-48549' id='answer-label-48549' class=' answer'><span>Redundant<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11768[]' id='answer-id-48550' class='answer   answerof-11768 ' value='48550'   \/><label for='answer-id-48550' id='answer-label-48550' class=' answer'><span>Hub-and-spoke<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11768[]' id='answer-id-48551' class='answer   answerof-11768 ' value='48551'   \/><label for='answer-id-48551' id='answer-label-48551' class=' answer'><span>Partial mesh<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11768[]' id='answer-id-48552' class='answer   answerof-11768 ' value='48552'   \/><label for='answer-id-48552' id='answer-label-48552' class=' answer'><span>Fully meshed<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-6' style=';'><div id='questionWrap-6'  class='   watupro-question-id-11769'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>6. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=650 height=233 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image004.jpg\" v:shapes=\"_x0000_i1026\"><br><br \/>\r<br><br><img decoding=\"async\" width=650 height=234 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image006.jpg\" v:shapes=\"_x0000_i1027\"><br><br \/>\r<br>Which of the following statements are correct? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_6' value='11769' \/><input type='hidden' id='answerType11769' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11769[]' id='answer-id-48553' class='answer   answerof-11769 ' value='48553'   \/><label for='answer-id-48553' id='answer-label-48553' class=' answer'><span>This is a redundant IPsec setup.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11769[]' id='answer-id-48554' class='answer   answerof-11769 ' value='48554'   \/><label for='answer-id-48554' id='answer-label-48554' class=' answer'><span>The TunnelB route is the primary one for searching the remote site. The TunnelA route is used only if the TunnelB VPN is down.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11769[]' id='answer-id-48555' class='answer   answerof-11769 ' value='48555'   \/><label for='answer-id-48555' id='answer-label-48555' class=' answer'><span>This setup requires at least two firewall policies with action set to IPsec.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11769[]' id='answer-id-48556' class='answer   answerof-11769 ' value='48556'   \/><label for='answer-id-48556' id='answer-label-48556' class=' answer'><span>Dead peer detection must be disabled to support this type of IPsec setup.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-7' style=';'><div id='questionWrap-7'  class='   watupro-question-id-11770'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>7. <\/span>Which statements about DNS filter profiles are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_7' value='11770' \/><input type='hidden' id='answerType11770' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11770[]' id='answer-id-48557' class='answer   answerof-11770 ' value='48557'   \/><label for='answer-id-48557' id='answer-label-48557' class=' answer'><span>They can inspect HTTP traffic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11770[]' id='answer-id-48558' class='answer   answerof-11770 ' value='48558'   \/><label for='answer-id-48558' id='answer-label-48558' class=' answer'><span>They must be applied in firewall policies with SSL inspection enabled.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11770[]' id='answer-id-48559' class='answer   answerof-11770 ' value='48559'   \/><label for='answer-id-48559' id='answer-label-48559' class=' answer'><span>They can block DNS request to known botnet command and control servers.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11770[]' id='answer-id-48560' class='answer   answerof-11770 ' value='48560'   \/><label for='answer-id-48560' id='answer-label-48560' class=' answer'><span>They can redirect blocked requests to a specific portal.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-8' style=';'><div id='questionWrap-8'  class='   watupro-question-id-11771'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>8. <\/span>An administrator needs to offload logging to FortiAnalyzer from a FortiGate with an internal hard drive. <br \/>\r<br>Which statements are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_8' value='11771' \/><input type='hidden' id='answerType11771' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11771[]' id='answer-id-48561' class='answer   answerof-11771 ' value='48561'   \/><label for='answer-id-48561' id='answer-label-48561' class=' answer'><span>Logs must be stored on FortiGate first, before transmitting to FortiAnalyzer<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11771[]' id='answer-id-48562' class='answer   answerof-11771 ' value='48562'   \/><label for='answer-id-48562' id='answer-label-48562' class=' answer'><span>FortiGate uses port 8080 for log transmission<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11771[]' id='answer-id-48563' class='answer   answerof-11771 ' value='48563'   \/><label for='answer-id-48563' id='answer-label-48563' class=' answer'><span>Log messages are transmitted as plain text in LZ4 compressed format (store-and-upload method).<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11771[]' id='answer-id-48564' class='answer   answerof-11771 ' value='48564'   \/><label for='answer-id-48564' id='answer-label-48564' class=' answer'><span>FortiGate can encrypt communications using SSL encrypted OFTP traffic.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-9' style=';'><div id='questionWrap-9'  class='   watupro-question-id-11772'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>9. <\/span>Which of the following statements describe WMI polling mode for FSSO collector agent? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_9' value='11772' \/><input type='hidden' id='answerType11772' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11772[]' id='answer-id-48565' class='answer   answerof-11772 ' value='48565'   \/><label for='answer-id-48565' id='answer-label-48565' class=' answer'><span>The collector agent does not need to search any security event logs.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11772[]' id='answer-id-48566' class='answer   answerof-11772 ' value='48566'   \/><label for='answer-id-48566' id='answer-label-48566' class=' answer'><span>WMI polling can increase bandwidth usage with large networks.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11772[]' id='answer-id-48567' class='answer   answerof-11772 ' value='48567'   \/><label for='answer-id-48567' id='answer-label-48567' class=' answer'><span>The NetSessionEnum function is used to track user logoffs.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11772[]' id='answer-id-48568' class='answer   answerof-11772 ' value='48568'   \/><label for='answer-id-48568' id='answer-label-48568' class=' answer'><span>The collector agent uses a Windows API to query DCs for user logins.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-10' style=';'><div id='questionWrap-10'  class='   watupro-question-id-11773'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>10. <\/span>An administrator observes that the port1 interface cannot be configured with an IP address. <br \/>\r<br>What can be the reasons for that? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_10' value='11773' \/><input type='hidden' id='answerType11773' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11773[]' id='answer-id-48569' class='answer   answerof-11773 ' value='48569'   \/><label for='answer-id-48569' id='answer-label-48569' class=' answer'><span>The interface has been configured for one-arm sniffer.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11773[]' id='answer-id-48570' class='answer   answerof-11773 ' value='48570'   \/><label for='answer-id-48570' id='answer-label-48570' class=' answer'><span>The interface is a member of a virtual wire pair.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11773[]' id='answer-id-48571' class='answer   answerof-11773 ' value='48571'   \/><label for='answer-id-48571' id='answer-label-48571' class=' answer'><span>The operation mode is transparent.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11773[]' id='answer-id-48572' class='answer   answerof-11773 ' value='48572'   \/><label for='answer-id-48572' id='answer-label-48572' class=' answer'><span>The interface is a member of a zone.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11773[]' id='answer-id-48573' class='answer   answerof-11773 ' value='48573'   \/><label for='answer-id-48573' id='answer-label-48573' class=' answer'><span>Captive portal is enabled in the interface.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-11' style=';'><div id='questionWrap-11'  class='   watupro-question-id-11774'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>11. <\/span>View the example routing table. <br \/>\r<br><br><img decoding=\"async\" width=482 height=112 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image008.jpg\" v:shapes=\"_x0000_i1028\"><br><br \/>\r<br>Which route will be selected when trying to reach 10.20.30.254?<\/div><input type='hidden' name='question_id[]' id='qID_11' value='11774' \/><input type='hidden' id='answerType11774' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11774[]' id='answer-id-48574' class='answer   answerof-11774 ' value='48574'   \/><label for='answer-id-48574' id='answer-label-48574' class=' answer'><span>10.20.30.0\/26 [10\/0] via 172.20.168.254, port2<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11774[]' id='answer-id-48575' class='answer   answerof-11774 ' value='48575'   \/><label for='answer-id-48575' id='answer-label-48575' class=' answer'><span>The traffic will be dropped because it cannot be routed.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11774[]' id='answer-id-48576' class='answer   answerof-11774 ' value='48576'   \/><label for='answer-id-48576' id='answer-label-48576' class=' answer'><span>10.20.30.0\/24 [10\/0] via 172.20.167.254, port3<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11774[]' id='answer-id-48577' class='answer   answerof-11774 ' value='48577'   \/><label for='answer-id-48577' id='answer-label-48577' class=' answer'><span>0.0.0.0\/0 [10\/0] via 172.20.121.2, port1<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-12' style=';'><div id='questionWrap-12'  class='   watupro-question-id-11775'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>12. <\/span>When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?<\/div><input type='hidden' name='question_id[]' id='qID_12' value='11775' \/><input type='hidden' id='answerType11775' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11775[]' id='answer-id-48578' class='answer   answerof-11775 ' value='48578'   \/><label for='answer-id-48578' id='answer-label-48578' class=' answer'><span>The FortiGate unit\u2019s public IP address<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11775[]' id='answer-id-48579' class='answer   answerof-11775 ' value='48579'   \/><label for='answer-id-48579' id='answer-label-48579' class=' answer'><span>The FortiGate unit\u2019s internal IP address<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11775[]' id='answer-id-48580' class='answer   answerof-11775 ' value='48580'   \/><label for='answer-id-48580' id='answer-label-48580' class=' answer'><span>The remote user\u2019s virtual IP address<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11775[]' id='answer-id-48581' class='answer   answerof-11775 ' value='48581'   \/><label for='answer-id-48581' id='answer-label-48581' class=' answer'><span>The remote user\u2019s public IP address<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-13' style=';'><div id='questionWrap-13'  class='   watupro-question-id-11776'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>13. <\/span>What is FortiGate\u2019s behavior when local disk logging is disabled?<\/div><input type='hidden' name='question_id[]' id='qID_13' value='11776' \/><input type='hidden' id='answerType11776' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11776[]' id='answer-id-48582' class='answer   answerof-11776 ' value='48582'   \/><label for='answer-id-48582' id='answer-label-48582' class=' answer'><span>Only real-time logs appear on the FortiGate dashboard.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11776[]' id='answer-id-48583' class='answer   answerof-11776 ' value='48583'   \/><label for='answer-id-48583' id='answer-label-48583' class=' answer'><span>No logs are generated.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11776[]' id='answer-id-48584' class='answer   answerof-11776 ' value='48584'   \/><label for='answer-id-48584' id='answer-label-48584' class=' answer'><span>Alert emails are disabled.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11776[]' id='answer-id-48585' class='answer   answerof-11776 ' value='48585'   \/><label for='answer-id-48585' id='answer-label-48585' class=' answer'><span>Remote logging is automatically enabled.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-14' style=';'><div id='questionWrap-14'  class='   watupro-question-id-11777'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>14. <\/span>What traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_14' value='11777' \/><input type='hidden' id='answerType11777' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11777[]' id='answer-id-48586' class='answer   answerof-11777 ' value='48586'   \/><label for='answer-id-48586' id='answer-label-48586' class=' answer'><span>Traffic to inappropriate web sites<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11777[]' id='answer-id-48587' class='answer   answerof-11777 ' value='48587'   \/><label for='answer-id-48587' id='answer-label-48587' class=' answer'><span>SQL injection attacks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11777[]' id='answer-id-48588' class='answer   answerof-11777 ' value='48588'   \/><label for='answer-id-48588' id='answer-label-48588' class=' answer'><span>Server information disclosure attacks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11777[]' id='answer-id-48589' class='answer   answerof-11777 ' value='48589'   \/><label for='answer-id-48589' id='answer-label-48589' class=' answer'><span>Credit card data leaks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11777[]' id='answer-id-48590' class='answer   answerof-11777 ' value='48590'   \/><label for='answer-id-48590' id='answer-label-48590' class=' answer'><span>Traffic to botnet command and control (C&amp;C) servers<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-15' style=';'><div id='questionWrap-15'  class='   watupro-question-id-11778'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>15. <\/span>Which statements about One-to-One IP pool are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_15' value='11778' \/><input type='hidden' id='answerType11778' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11778[]' id='answer-id-48591' class='answer   answerof-11778 ' value='48591'   \/><label for='answer-id-48591' id='answer-label-48591' class=' answer'><span>It allows configuration of ARP replies.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11778[]' id='answer-id-48592' class='answer   answerof-11778 ' value='48592'   \/><label for='answer-id-48592' id='answer-label-48592' class=' answer'><span>It allows fixed mapping of an internal address range to an external address range.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11778[]' id='answer-id-48593' class='answer   answerof-11778 ' value='48593'   \/><label for='answer-id-48593' id='answer-label-48593' class=' answer'><span>It is used for destination NA<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11778[]' id='answer-id-48594' class='answer   answerof-11778 ' value='48594'   \/><label for='answer-id-48594' id='answer-label-48594' class=' answer'><span>It does not use port address translation.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-16' style=';'><div id='questionWrap-16'  class='   watupro-question-id-11779'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>16. <\/span>Which statements correctly describe transparent mode operation? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_16' value='11779' \/><input type='hidden' id='answerType11779' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11779[]' id='answer-id-48595' class='answer   answerof-11779 ' value='48595'   \/><label for='answer-id-48595' id='answer-label-48595' class=' answer'><span>All interfaces of the transparent mode FortiGate device must be on different IP subnets.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11779[]' id='answer-id-48596' class='answer   answerof-11779 ' value='48596'   \/><label for='answer-id-48596' id='answer-label-48596' class=' answer'><span>The transparent FortiGate is visible to network hosts in an IP traceroute.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11779[]' id='answer-id-48597' class='answer   answerof-11779 ' value='48597'   \/><label for='answer-id-48597' id='answer-label-48597' class=' answer'><span>It permits inline traffic inspection and firewalling without changing the IP scheme of the network.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11779[]' id='answer-id-48598' class='answer   answerof-11779 ' value='48598'   \/><label for='answer-id-48598' id='answer-label-48598' class=' answer'><span>Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11779[]' id='answer-id-48599' class='answer   answerof-11779 ' value='48599'   \/><label for='answer-id-48599' id='answer-label-48599' class=' answer'><span>The FortiGate acts as transparent bridge and forwards traffic at Layer-2.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-17' style=';'><div id='questionWrap-17'  class='   watupro-question-id-11780'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>17. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=650 height=162 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image012.jpg\" v:shapes=\"_x0000_i1030\"><br><br \/>\r<br>What is the effect of the Disconnect Cluster Member operation as shown in the exhibit? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_17' value='11780' \/><input type='hidden' id='answerType11780' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11780[]' id='answer-id-48600' class='answer   answerof-11780 ' value='48600'   \/><label for='answer-id-48600' id='answer-label-48600' class=' answer'><span>The HA mode changes to standalone.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11780[]' id='answer-id-48601' class='answer   answerof-11780 ' value='48601'   \/><label for='answer-id-48601' id='answer-label-48601' class=' answer'><span>The firewall policies are deleted on the disconnected member.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11780[]' id='answer-id-48602' class='answer   answerof-11780 ' value='48602'   \/><label for='answer-id-48602' id='answer-label-48602' class=' answer'><span>The system hostname is set to the FortiGate serial number.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11780[]' id='answer-id-48603' class='answer   answerof-11780 ' value='48603'   \/><label for='answer-id-48603' id='answer-label-48603' class=' answer'><span>The port3 is configured with an IP address for management access.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-18' style=';'><div id='questionWrap-18'  class='   watupro-question-id-11781'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>18. <\/span>What step is required to configure an SSL VPN to access to an internal server using port forward mode?<\/div><input type='hidden' name='question_id[]' id='qID_18' value='11781' \/><input type='hidden' id='answerType11781' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11781[]' id='answer-id-48604' class='answer   answerof-11781 ' value='48604'   \/><label for='answer-id-48604' id='answer-label-48604' class=' answer'><span>Configure the virtual IP addresses to be assigned to the SSL VPN users.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11781[]' id='answer-id-48605' class='answer   answerof-11781 ' value='48605'   \/><label for='answer-id-48605' id='answer-label-48605' class=' answer'><span>Install FortiClient SSL VPN client<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11781[]' id='answer-id-48606' class='answer   answerof-11781 ' value='48606'   \/><label for='answer-id-48606' id='answer-label-48606' class=' answer'><span>Create a SSL VPN realm reserved for clients using port forward mode.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11781[]' id='answer-id-48607' class='answer   answerof-11781 ' value='48607'   \/><label for='answer-id-48607' id='answer-label-48607' class=' answer'><span>Configure the client application to forward IP traffic to a Java applet proxy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-19' style=';'><div id='questionWrap-19'  class='   watupro-question-id-11782'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>19. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=650 height=213 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image014.jpg\" v:shapes=\"_x0000_i1031\"><br><br \/>\r<br>This is a sniffer output of a telnet connection request from 172.20.120.186 to the port1 interface of FGT1. <br \/>\r<br><br><img decoding=\"async\" width=603 height=88 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image016.jpg\" v:shapes=\"_x0000_i1032\"><br><br \/>\r<br><br><img decoding=\"async\" width=434 height=49 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image018.jpg\" v:shapes=\"_x0000_i1033\"><br><br \/>\r<br>In this scenario. FGT1 has the following routing table: <br \/>\r<br>Assuming telnet service is enabled for port1, which of the following statements correctly describes why FGT1 is not responding?<\/div><input type='hidden' name='question_id[]' id='qID_19' value='11782' \/><input type='hidden' id='answerType11782' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11782[]' id='answer-id-48608' class='answer   answerof-11782 ' value='48608'   \/><label for='answer-id-48608' id='answer-label-48608' class=' answer'><span>The port1cable is disconnected.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11782[]' id='answer-id-48609' class='answer   answerof-11782 ' value='48609'   \/><label for='answer-id-48609' id='answer-label-48609' class=' answer'><span>The connection is dropped due to reverse path forwarding check.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11782[]' id='answer-id-48610' class='answer   answerof-11782 ' value='48610'   \/><label for='answer-id-48610' id='answer-label-48610' class=' answer'><span>The connection is denied due to forward policy check.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11782[]' id='answer-id-48611' class='answer   answerof-11782 ' value='48611'   \/><label for='answer-id-48611' id='answer-label-48611' class=' answer'><span>FGT1\u2019s port1 interface is administratively down.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-20' style=';'><div id='questionWrap-20'  class='   watupro-question-id-11783'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>20. <\/span>An administrator needs to be able to view logs for application usage on your network. <br \/>\r<br>What configurations are required to ensure that FortiGate generates logs for application usage activity? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_20' value='11783' \/><input type='hidden' id='answerType11783' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11783[]' id='answer-id-48612' class='answer   answerof-11783 ' value='48612'   \/><label for='answer-id-48612' id='answer-label-48612' class=' answer'><span>Enable a web filtering profile on the firewall policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11783[]' id='answer-id-48613' class='answer   answerof-11783 ' value='48613'   \/><label for='answer-id-48613' id='answer-label-48613' class=' answer'><span>Create an application control policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11783[]' id='answer-id-48614' class='answer   answerof-11783 ' value='48614'   \/><label for='answer-id-48614' id='answer-label-48614' class=' answer'><span>Enable logging on the firewall policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11783[]' id='answer-id-48615' class='answer   answerof-11783 ' value='48615'   \/><label for='answer-id-48615' id='answer-label-48615' class=' answer'><span>Enable an application control security profile on the firewall policy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-21' style=';'><div id='questionWrap-21'  class='   watupro-question-id-11784'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>21. <\/span>A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups. <br \/>\r<br>What is required in the SSL VPN configuration to meet these requirements?<\/div><input type='hidden' name='question_id[]' id='qID_21' value='11784' \/><input type='hidden' id='answerType11784' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11784[]' id='answer-id-48616' class='answer   answerof-11784 ' value='48616'   \/><label for='answer-id-48616' id='answer-label-48616' class=' answer'><span>Two separated SSL VPNs in different interfaces of the same VDOM<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11784[]' id='answer-id-48617' class='answer   answerof-11784 ' value='48617'   \/><label for='answer-id-48617' id='answer-label-48617' class=' answer'><span>Different SSL VPN realms for each group<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11784[]' id='answer-id-48618' class='answer   answerof-11784 ' value='48618'   \/><label for='answer-id-48618' id='answer-label-48618' class=' answer'><span>Different virtual SSLVPN IP addresses for each group<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11784[]' id='answer-id-48619' class='answer   answerof-11784 ' value='48619'   \/><label for='answer-id-48619' id='answer-label-48619' class=' answer'><span>Two firewall policies with different captive portals<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-22' style=';'><div id='questionWrap-22'  class='   watupro-question-id-11785'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>22. <\/span>Examine the routing database. <br \/>\r<br><br><img decoding=\"async\" width=548 height=151 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image024.jpg\" v:shapes=\"_x0000_i1036\"><br><br \/>\r<br>Which of the following statements are correct? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_22' value='11785' \/><input type='hidden' id='answerType11785' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11785[]' id='answer-id-48620' class='answer   answerof-11785 ' value='48620'   \/><label for='answer-id-48620' id='answer-label-48620' class=' answer'><span>The port3default route has the lowest metric, making it the best route.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11785[]' id='answer-id-48621' class='answer   answerof-11785 ' value='48621'   \/><label for='answer-id-48621' id='answer-label-48621' class=' answer'><span>There will be eight routes active in the routing table.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11785[]' id='answer-id-48622' class='answer   answerof-11785 ' value='48622'   \/><label for='answer-id-48622' id='answer-label-48622' class=' answer'><span>The port3default has a higher distance than the port1 and port2 default routes.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11785[]' id='answer-id-48623' class='answer   answerof-11785 ' value='48623'   \/><label for='answer-id-48623' id='answer-label-48623' class=' answer'><span>Both port1 and port2default routers are active in the routing table.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-23' style=';'><div id='questionWrap-23'  class='   watupro-question-id-11786'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>23. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=650 height=159 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image026.jpg\" v:shapes=\"_x0000_i1037\"><br><br \/>\r<br>When a user attempts to connect to an HTTPS site, what is the expected result with this configuration?<\/div><input type='hidden' name='question_id[]' id='qID_23' value='11786' \/><input type='hidden' id='answerType11786' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11786[]' id='answer-id-48624' class='answer   answerof-11786 ' value='48624'   \/><label for='answer-id-48624' id='answer-label-48624' class=' answer'><span>The user is required to authenticate before accessing sites with untrusted SSL certificates.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11786[]' id='answer-id-48625' class='answer   answerof-11786 ' value='48625'   \/><label for='answer-id-48625' id='answer-label-48625' class=' answer'><span>The user is presented with certificate warnings when connecting to sites that have untrusted SSL certificates.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11786[]' id='answer-id-48626' class='answer   answerof-11786 ' value='48626'   \/><label for='answer-id-48626' id='answer-label-48626' class=' answer'><span>The user is allowed access all sites with untrusted SSL certificates, without certificate warnings.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11786[]' id='answer-id-48627' class='answer   answerof-11786 ' value='48627'   \/><label for='answer-id-48627' id='answer-label-48627' class=' answer'><span>The user is blocked from connecting to sites that have untrusted SSL certificates (no exception provided).<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-24' style=';'><div id='questionWrap-24'  class='   watupro-question-id-11787'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>24. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=650 height=252 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image028.jpg\" v:shapes=\"_x0000_i1038\"><br><br \/>\r<br>When Role is set to Undefined, which statement is true?<\/div><input type='hidden' name='question_id[]' id='qID_24' value='11787' \/><input type='hidden' id='answerType11787' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11787[]' id='answer-id-48628' class='answer   answerof-11787 ' value='48628'   \/><label for='answer-id-48628' id='answer-label-48628' class=' answer'><span>The GUI provides all the configuration options available for the port1 interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11787[]' id='answer-id-48629' class='answer   answerof-11787 ' value='48629'   \/><label for='answer-id-48629' id='answer-label-48629' class=' answer'><span>You cannot configure a static IP address for the port1 interface because it allows only DHCP addressing mode.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11787[]' id='answer-id-48630' class='answer   answerof-11787 ' value='48630'   \/><label for='answer-id-48630' id='answer-label-48630' class=' answer'><span>Firewall policies can be created from only the port1 interface to any interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11787[]' id='answer-id-48631' class='answer   answerof-11787 ' value='48631'   \/><label for='answer-id-48631' id='answer-label-48631' class=' answer'><span>The port1 interface is reserved for management only.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-25' style=';'><div id='questionWrap-25'  class='   watupro-question-id-11788'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>25. <\/span>Which statement is true regarding the policy ID numbers of firewall policies?<\/div><input type='hidden' name='question_id[]' id='qID_25' value='11788' \/><input type='hidden' id='answerType11788' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11788[]' id='answer-id-48632' class='answer   answerof-11788 ' value='48632'   \/><label for='answer-id-48632' id='answer-label-48632' class=' answer'><span>Change when firewall policies are re-ordered.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11788[]' id='answer-id-48633' class='answer   answerof-11788 ' value='48633'   \/><label for='answer-id-48633' id='answer-label-48633' class=' answer'><span>Defines the order in which rules are processed.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11788[]' id='answer-id-48634' class='answer   answerof-11788 ' value='48634'   \/><label for='answer-id-48634' id='answer-label-48634' class=' answer'><span>Are required to modify a firewall policy from the CL<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11788[]' id='answer-id-48635' class='answer   answerof-11788 ' value='48635'   \/><label for='answer-id-48635' id='answer-label-48635' class=' answer'><span>Represent the number of objects used in the firewall policy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-26' style=';'><div id='questionWrap-26'  class='   watupro-question-id-11789'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>26. <\/span>An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to SSL VPN. <br \/>\r<br>How can this be achieved?<\/div><input type='hidden' name='question_id[]' id='qID_26' value='11789' \/><input type='hidden' id='answerType11789' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11789[]' id='answer-id-48636' class='answer   answerof-11789 ' value='48636'   \/><label for='answer-id-48636' id='answer-label-48636' class=' answer'><span>Disabling split tunneling<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11789[]' id='answer-id-48637' class='answer   answerof-11789 ' value='48637'   \/><label for='answer-id-48637' id='answer-label-48637' class=' answer'><span>Configuring web bookmarks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11789[]' id='answer-id-48638' class='answer   answerof-11789 ' value='48638'   \/><label for='answer-id-48638' id='answer-label-48638' class=' answer'><span>Assigning public IP addresses to SSL VPN clients<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11789[]' id='answer-id-48639' class='answer   answerof-11789 ' value='48639'   \/><label for='answer-id-48639' id='answer-label-48639' class=' answer'><span>Using web-only mode<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-27' style=';'><div id='questionWrap-27'  class='   watupro-question-id-11790'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>27. <\/span>Which traffic inspection features can be executed by a security processor (SP)? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_27' value='11790' \/><input type='hidden' id='answerType11790' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11790[]' id='answer-id-48640' class='answer   answerof-11790 ' value='48640'   \/><label for='answer-id-48640' id='answer-label-48640' class=' answer'><span>TCP SYN proxy<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11790[]' id='answer-id-48641' class='answer   answerof-11790 ' value='48641'   \/><label for='answer-id-48641' id='answer-label-48641' class=' answer'><span>SIP session helper<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11790[]' id='answer-id-48642' class='answer   answerof-11790 ' value='48642'   \/><label for='answer-id-48642' id='answer-label-48642' class=' answer'><span>Proxy-based antivirus<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11790[]' id='answer-id-48643' class='answer   answerof-11790 ' value='48643'   \/><label for='answer-id-48643' id='answer-label-48643' class=' answer'><span>Attack signature matching<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11790[]' id='answer-id-48644' class='answer   answerof-11790 ' value='48644'   \/><label for='answer-id-48644' id='answer-label-48644' class=' answer'><span>Flow-based web filtering<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-28' style=';'><div id='questionWrap-28'  class='   watupro-question-id-11791'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>28. <\/span>An administrator has configured two VLAN interfaces: <br \/>\r<br><br><img decoding=\"async\" width=303 height=303 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image034.jpg\" v:shapes=\"_x0000_i1041\"><br><br \/>\r<br>A DHCP server is connected to the VLAN10 interface. A DHCP client is connected to the VLAN5 interface. <br \/>\r<br>However, the DHCP client cannot get a dynamic IP address from the DHCP server. <br \/>\r<br>What is the cause of the problem?<\/div><input type='hidden' name='question_id[]' id='qID_28' value='11791' \/><input type='hidden' id='answerType11791' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11791[]' id='answer-id-48645' class='answer   answerof-11791 ' value='48645'   \/><label for='answer-id-48645' id='answer-label-48645' class=' answer'><span>Both interfaces must be in different VDOMs<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11791[]' id='answer-id-48646' class='answer   answerof-11791 ' value='48646'   \/><label for='answer-id-48646' id='answer-label-48646' class=' answer'><span>Both interfaces must have the same VLAN I<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11791[]' id='answer-id-48647' class='answer   answerof-11791 ' value='48647'   \/><label for='answer-id-48647' id='answer-label-48647' class=' answer'><span>The role of the VLAN10 interface must be set to server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11791[]' id='answer-id-48648' class='answer   answerof-11791 ' value='48648'   \/><label for='answer-id-48648' id='answer-label-48648' class=' answer'><span>Both interfaces must belong to the same forward domain.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-29' style=';'><div id='questionWrap-29'  class='   watupro-question-id-11792'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>29. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=650 height=346 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image038.jpg\" v:shapes=\"_x0000_i1043\"><br><br \/>\r<br>A user behind the FortiGate is trying to go to http:\/\/www.addictinggames.com(Addicting.Games). <br \/>\r<br>Based on this configuration, which statement is true?<\/div><input type='hidden' name='question_id[]' id='qID_29' value='11792' \/><input type='hidden' id='answerType11792' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11792[]' id='answer-id-48649' class='answer   answerof-11792 ' value='48649'   \/><label for='answer-id-48649' id='answer-label-48649' class=' answer'><span>Addicting.Games is allowed based on the Application Overrides configuration.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11792[]' id='answer-id-48650' class='answer   answerof-11792 ' value='48650'   \/><label for='answer-id-48650' id='answer-label-48650' class=' answer'><span>Addicting.Games is blocked based on the Filter Overrides configuration.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11792[]' id='answer-id-48651' class='answer   answerof-11792 ' value='48651'   \/><label for='answer-id-48651' id='answer-label-48651' class=' answer'><span>Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11792[]' id='answer-id-48652' class='answer   answerof-11792 ' value='48652'   \/><label for='answer-id-48652' id='answer-label-48652' class=' answer'><span>Addicting.Games is allowed based on the Categories configuration.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-30' style=';'><div id='questionWrap-30'  class='   watupro-question-id-11793'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>30. <\/span>What are the purposes of NAT traversal in IPsec? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_30' value='11793' \/><input type='hidden' id='answerType11793' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11793[]' id='answer-id-48653' class='answer   answerof-11793 ' value='48653'   \/><label for='answer-id-48653' id='answer-label-48653' class=' answer'><span>To detect intermediary NAT devices in the tunnel path.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11793[]' id='answer-id-48654' class='answer   answerof-11793 ' value='48654'   \/><label for='answer-id-48654' id='answer-label-48654' class=' answer'><span>To encapsulate ESP packets in UDP packets using port 4500.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11793[]' id='answer-id-48655' class='answer   answerof-11793 ' value='48655'   \/><label for='answer-id-48655' id='answer-label-48655' class=' answer'><span>To force a new DH exchange with each phase 2 re-key<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11793[]' id='answer-id-48656' class='answer   answerof-11793 ' value='48656'   \/><label for='answer-id-48656' id='answer-label-48656' class=' answer'><span>To dynamically change phase 1 negotiation mode to Aggressive.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-31' style=';'><div id='questionWrap-31'  class='   watupro-question-id-11794'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>31. <\/span>Which statements about application control are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_31' value='11794' \/><input type='hidden' id='answerType11794' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11794[]' id='answer-id-48657' class='answer   answerof-11794 ' value='48657'   \/><label for='answer-id-48657' id='answer-label-48657' class=' answer'><span>Enabling application control profile in a security profile enables application control for all the traffic flowing through the FortiGate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11794[]' id='answer-id-48658' class='answer   answerof-11794 ' value='48658'   \/><label for='answer-id-48658' id='answer-label-48658' class=' answer'><span>It cannot take an action on unknown applications.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11794[]' id='answer-id-48659' class='answer   answerof-11794 ' value='48659'   \/><label for='answer-id-48659' id='answer-label-48659' class=' answer'><span>It can inspect encrypted traffic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11794[]' id='answer-id-48660' class='answer   answerof-11794 ' value='48660'   \/><label for='answer-id-48660' id='answer-label-48660' class=' answer'><span>It can identify traffic from known applications, even when they are using non-standard TCP\/UDP ports.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-32' style=';'><div id='questionWrap-32'  class='   watupro-question-id-11795'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>32. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=650 height=129 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image040.jpg\" v:shapes=\"_x0000_i1044\"><br><br \/>\r<br>The client cannot connect to the HTTP web server. <br \/>\r<br>The administrator run the FortiGate built-in sniffer and got the following output: <br \/>\r<br><br><img decoding=\"async\" width=592 height=120 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image042.jpg\" v:shapes=\"_x0000_i1045\"><br><br \/>\r<br>What should be done next to troubleshoot the problem?<\/div><input type='hidden' name='question_id[]' id='qID_32' value='11795' \/><input type='hidden' id='answerType11795' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11795[]' id='answer-id-48661' class='answer   answerof-11795 ' value='48661'   \/><label for='answer-id-48661' id='answer-label-48661' class=' answer'><span>Execute another sniffer in the FortiGate, this time with the filter \u201chost 10.0.1.10\u201d.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11795[]' id='answer-id-48662' class='answer   answerof-11795 ' value='48662'   \/><label for='answer-id-48662' id='answer-label-48662' class=' answer'><span>Run a sniffer in the web server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11795[]' id='answer-id-48663' class='answer   answerof-11795 ' value='48663'   \/><label for='answer-id-48663' id='answer-label-48663' class=' answer'><span>Capture the traffic using an external sniffer connected to port1.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11795[]' id='answer-id-48664' class='answer   answerof-11795 ' value='48664'   \/><label for='answer-id-48664' id='answer-label-48664' class=' answer'><span>Execute a debug flow.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-33' style=';'><div id='questionWrap-33'  class='   watupro-question-id-11796'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>33. <\/span>Which of the following statements about NTLM authentication are correct? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_33' value='11796' \/><input type='hidden' id='answerType11796' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11796[]' id='answer-id-48665' class='answer   answerof-11796 ' value='48665'   \/><label for='answer-id-48665' id='answer-label-48665' class=' answer'><span>It is useful when users log in to DCs that are not monitored by a collector agent.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11796[]' id='answer-id-48666' class='answer   answerof-11796 ' value='48666'   \/><label for='answer-id-48666' id='answer-label-48666' class=' answer'><span>It takes over as the primary authentication method when configured alongside FSS<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11796[]' id='answer-id-48667' class='answer   answerof-11796 ' value='48667'   \/><label for='answer-id-48667' id='answer-label-48667' class=' answer'><span>Multi-domain environments require DC agents on every domain controller.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11796[]' id='answer-id-48668' class='answer   answerof-11796 ' value='48668'   \/><label for='answer-id-48668' id='answer-label-48668' class=' answer'><span>NTLM-enabled web browsers are required.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-34' style=';'><div id='questionWrap-34'  class='   watupro-question-id-11797'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>34. <\/span>What FortiGate feature can be used to allow IPv6 clients to connect to IPv4 servers?<\/div><input type='hidden' name='question_id[]' id='qID_34' value='11797' \/><input type='hidden' id='answerType11797' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11797[]' id='answer-id-48669' class='answer   answerof-11797 ' value='48669'   \/><label for='answer-id-48669' id='answer-label-48669' class=' answer'><span>IPv6-over-IPv4 IPsec<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11797[]' id='answer-id-48670' class='answer   answerof-11797 ' value='48670'   \/><label for='answer-id-48670' id='answer-label-48670' class=' answer'><span>NAT64<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11797[]' id='answer-id-48671' class='answer   answerof-11797 ' value='48671'   \/><label for='answer-id-48671' id='answer-label-48671' class=' answer'><span>IPv4-over-IPv6 IPsec<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11797[]' id='answer-id-48672' class='answer   answerof-11797 ' value='48672'   \/><label for='answer-id-48672' id='answer-label-48672' class=' answer'><span>NAT66<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-35' style=';'><div id='questionWrap-35'  class='   watupro-question-id-11798'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>35. <\/span>Which statements best describe auto discovery VPN (ADVPN). (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_35' value='11798' \/><input type='hidden' id='answerType11798' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11798[]' id='answer-id-48673' class='answer   answerof-11798 ' value='48673'   \/><label for='answer-id-48673' id='answer-label-48673' class=' answer'><span>It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11798[]' id='answer-id-48674' class='answer   answerof-11798 ' value='48674'   \/><label for='answer-id-48674' id='answer-label-48674' class=' answer'><span>ADVPN is only supported with IKEv2.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11798[]' id='answer-id-48675' class='answer   answerof-11798 ' value='48675'   \/><label for='answer-id-48675' id='answer-label-48675' class=' answer'><span>Tunnels are negotiated dynamically between spokes.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11798[]' id='answer-id-48676' class='answer   answerof-11798 ' value='48676'   \/><label for='answer-id-48676' id='answer-label-48676' class=' answer'><span>Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-36' style=';'><div id='questionWrap-36'  class='   watupro-question-id-11799'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>36. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=649 height=147 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image044.jpg\" v:shapes=\"_x0000_i1046\"><br><br \/>\r<br>Which statements about the exhibit are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_36' value='11799' \/><input type='hidden' id='answerType11799' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11799[]' id='answer-id-48677' class='answer   answerof-11799 ' value='48677'   \/><label for='answer-id-48677' id='answer-label-48677' class=' answer'><span>port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11799[]' id='answer-id-48678' class='answer   answerof-11799 ' value='48678'   \/><label for='answer-id-48678' id='answer-label-48678' class=' answer'><span>port1-VLAN1 is the native VLAN for the port1 physical interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11799[]' id='answer-id-48679' class='answer   answerof-11799 ' value='48679'   \/><label for='answer-id-48679' id='answer-label-48679' class=' answer'><span>Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11799[]' id='answer-id-48680' class='answer   answerof-11799 ' value='48680'   \/><label for='answer-id-48680' id='answer-label-48680' class=' answer'><span>Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-37' style=';'><div id='questionWrap-37'  class='   watupro-question-id-11800'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>37. <\/span>Which statement about the firewall policy authentication timeout is true?<\/div><input type='hidden' name='question_id[]' id='qID_37' value='11800' \/><input type='hidden' id='answerType11800' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11800[]' id='answer-id-48681' class='answer   answerof-11800 ' value='48681'   \/><label for='answer-id-48681' id='answer-label-48681' class=' answer'><span>It is a hard timeout. The FortiGate removes the temporary policy for a user\u2019s source IP address after this times expires.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11800[]' id='answer-id-48682' class='answer   answerof-11800 ' value='48682'   \/><label for='answer-id-48682' id='answer-label-48682' class=' answer'><span>It is a hard timeout. The FortiGate removes the temporary policy for a user\u2019s source MAC address after this times expires.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11800[]' id='answer-id-48683' class='answer   answerof-11800 ' value='48683'   \/><label for='answer-id-48683' id='answer-label-48683' class=' answer'><span>It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the user\u2019s source MAC address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11800[]' id='answer-id-48684' class='answer   answerof-11800 ' value='48684'   \/><label for='answer-id-48684' id='answer-label-48684' class=' answer'><span>It is an idle timeout. The FortiGate considers a user to be idle if it does not see any packets coming from the user\u2019s source I<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-38' style=';'><div id='questionWrap-38'  class='   watupro-question-id-11801'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>38. <\/span>Which of the following settings and protocols can be used to provide secure and restrictive administrative access to FortiGate? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_38' value='11801' \/><input type='hidden' id='answerType11801' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11801[]' id='answer-id-48685' class='answer   answerof-11801 ' value='48685'   \/><label for='answer-id-48685' id='answer-label-48685' class=' answer'><span>Trusted host<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11801[]' id='answer-id-48686' class='answer   answerof-11801 ' value='48686'   \/><label for='answer-id-48686' id='answer-label-48686' class=' answer'><span>HTTPS<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11801[]' id='answer-id-48687' class='answer   answerof-11801 ' value='48687'   \/><label for='answer-id-48687' id='answer-label-48687' class=' answer'><span>Trusted authentication<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11801[]' id='answer-id-48688' class='answer   answerof-11801 ' value='48688'   \/><label for='answer-id-48688' id='answer-label-48688' class=' answer'><span>SSH<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11801[]' id='answer-id-48689' class='answer   answerof-11801 ' value='48689'   \/><label for='answer-id-48689' id='answer-label-48689' class=' answer'><span>FortiTelemetry<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-39' style=';'><div id='questionWrap-39'  class='   watupro-question-id-11802'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>39. <\/span>If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does the FortiGate take?<\/div><input type='hidden' name='question_id[]' id='qID_39' value='11802' \/><input type='hidden' id='answerType11802' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11802[]' id='answer-id-48690' class='answer   answerof-11802 ' value='48690'   \/><label for='answer-id-48690' id='answer-label-48690' class=' answer'><span>It blocks all future traffic for that IP address for a configured interval.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11802[]' id='answer-id-48691' class='answer   answerof-11802 ' value='48691'   \/><label for='answer-id-48691' id='answer-label-48691' class=' answer'><span>It archives the data for that IP address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11802[]' id='answer-id-48692' class='answer   answerof-11802 ' value='48692'   \/><label for='answer-id-48692' id='answer-label-48692' class=' answer'><span>It provides a DLP block replacement page with a link to download the file.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11802[]' id='answer-id-48693' class='answer   answerof-11802 ' value='48693'   \/><label for='answer-id-48693' id='answer-label-48693' class=' answer'><span>It notifies the administrator by sending an email.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-40' style=';'><div id='questionWrap-40'  class='   watupro-question-id-11803'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>40. <\/span>How can a browser trust a web-server certificate signed by a third party CA?<\/div><input type='hidden' name='question_id[]' id='qID_40' value='11803' \/><input type='hidden' id='answerType11803' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11803[]' id='answer-id-48694' class='answer   answerof-11803 ' value='48694'   \/><label for='answer-id-48694' id='answer-label-48694' class=' answer'><span>The browser must have the CA certificate that signed the web-server certificate installed.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11803[]' id='answer-id-48695' class='answer   answerof-11803 ' value='48695'   \/><label for='answer-id-48695' id='answer-label-48695' class=' answer'><span>The browser must have the web-server certificate installed.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11803[]' id='answer-id-48696' class='answer   answerof-11803 ' value='48696'   \/><label for='answer-id-48696' id='answer-label-48696' class=' answer'><span>The browser must have the private key of CA certificate that signed the web-browser certificate installed.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11803[]' id='answer-id-48697' class='answer   answerof-11803 ' value='48697'   \/><label for='answer-id-48697' id='answer-label-48697' class=' answer'><span>The browser must have the public key of the web-server certificate installed.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-41' style=';'><div id='questionWrap-41'  class='   watupro-question-id-11804'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>41. <\/span>How does FortiGate verify the login credentials of a remote LDAP user?<\/div><input type='hidden' name='question_id[]' id='qID_41' value='11804' \/><input type='hidden' id='answerType11804' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11804[]' id='answer-id-48698' class='answer   answerof-11804 ' value='48698'   \/><label for='answer-id-48698' id='answer-label-48698' class=' answer'><span>FortiGate sends the user entered credentials to the LDAP server for authentication.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11804[]' id='answer-id-48699' class='answer   answerof-11804 ' value='48699'   \/><label for='answer-id-48699' id='answer-label-48699' class=' answer'><span>FortiGate re-generates the algorithm based on the login credentials and compares it against the algorithm stored on the LDAP server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11804[]' id='answer-id-48700' class='answer   answerof-11804 ' value='48700'   \/><label for='answer-id-48700' id='answer-label-48700' class=' answer'><span>FortiGate queries its own database for credentials.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11804[]' id='answer-id-48701' class='answer   answerof-11804 ' value='48701'   \/><label for='answer-id-48701' id='answer-label-48701' class=' answer'><span>FortiGate queries the LDAP server for credentials.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-42' style=';'><div id='questionWrap-42'  class='   watupro-question-id-11805'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>42. <\/span>An administrator has enabled proxy-based antivirus scanning and configured the following settings: <br \/>\r<br><br><img decoding=\"async\" width=378 height=129 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image046.jpg\" v:shapes=\"_x0000_i1047\"><br><br \/>\r<br>Which statement about the above configuration is true?<\/div><input type='hidden' name='question_id[]' id='qID_42' value='11805' \/><input type='hidden' id='answerType11805' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11805[]' id='answer-id-48702' class='answer   answerof-11805 ' value='48702'   \/><label for='answer-id-48702' id='answer-label-48702' class=' answer'><span>Files bigger than 10 MB are not scanned for viruses and will be blocked.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11805[]' id='answer-id-48703' class='answer   answerof-11805 ' value='48703'   \/><label for='answer-id-48703' id='answer-label-48703' class=' answer'><span>FortiGate scans only the first 10 MB of any file.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11805[]' id='answer-id-48704' class='answer   answerof-11805 ' value='48704'   \/><label for='answer-id-48704' id='answer-label-48704' class=' answer'><span>Files bigger than 10 MB are sent to the heuristics engine for scanning.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11805[]' id='answer-id-48705' class='answer   answerof-11805 ' value='48705'   \/><label for='answer-id-48705' id='answer-label-48705' class=' answer'><span>FortiGate scans the files in chunks of 10 M<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-43' style=';'><div id='questionWrap-43'  class='   watupro-question-id-11806'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>43. <\/span>Examine this output from the diagnose sys topcommand: <br \/>\r<br><br><img decoding=\"async\" width=499 height=151 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image048.jpg\" v:shapes=\"_x0000_i1048\"><br><br \/>\r<br>Which statements about the output are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_43' value='11806' \/><input type='hidden' id='answerType11806' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11806[]' id='answer-id-48706' class='answer   answerof-11806 ' value='48706'   \/><label for='answer-id-48706' id='answer-label-48706' class=' answer'><span>sshd is the process consuming most memory<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11806[]' id='answer-id-48707' class='answer   answerof-11806 ' value='48707'   \/><label for='answer-id-48707' id='answer-label-48707' class=' answer'><span>sshd is the process consuming most CPU<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11806[]' id='answer-id-48708' class='answer   answerof-11806 ' value='48708'   \/><label for='answer-id-48708' id='answer-label-48708' class=' answer'><span>All the processes listed are in sleeping state<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11806[]' id='answer-id-48709' class='answer   answerof-11806 ' value='48709'   \/><label for='answer-id-48709' id='answer-label-48709' class=' answer'><span>The sshd process is using 123 pages of memory<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-44' style=';'><div id='questionWrap-44'  class='   watupro-question-id-11807'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>44. <\/span>An administrator has created a custom IPS signature. <br \/>\r<br>Where does the custom IPS signature have to be applied?<\/div><input type='hidden' name='question_id[]' id='qID_44' value='11807' \/><input type='hidden' id='answerType11807' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11807[]' id='answer-id-48710' class='answer   answerof-11807 ' value='48710'   \/><label for='answer-id-48710' id='answer-label-48710' class=' answer'><span>In an IPS sensor<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11807[]' id='answer-id-48711' class='answer   answerof-11807 ' value='48711'   \/><label for='answer-id-48711' id='answer-label-48711' class=' answer'><span>In an interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11807[]' id='answer-id-48712' class='answer   answerof-11807 ' value='48712'   \/><label for='answer-id-48712' id='answer-label-48712' class=' answer'><span>In a DoS policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11807[]' id='answer-id-48713' class='answer   answerof-11807 ' value='48713'   \/><label for='answer-id-48713' id='answer-label-48713' class=' answer'><span>In an application control profile.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-45' style=';'><div id='questionWrap-45'  class='   watupro-question-id-11808'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>45. <\/span>An administrator wants to configure a FortiGate as a DNS server. The FortiGate must use its DNS database first, and then relay all irresolvable queries to an external DNS server. <br \/>\r<br>Which of the following DNS method must you use?<\/div><input type='hidden' name='question_id[]' id='qID_45' value='11808' \/><input type='hidden' id='answerType11808' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11808[]' id='answer-id-48714' class='answer   answerof-11808 ' value='48714'   \/><label for='answer-id-48714' id='answer-label-48714' class=' answer'><span>Non-recursive<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11808[]' id='answer-id-48715' class='answer   answerof-11808 ' value='48715'   \/><label for='answer-id-48715' id='answer-label-48715' class=' answer'><span>Recursive<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11808[]' id='answer-id-48716' class='answer   answerof-11808 ' value='48716'   \/><label for='answer-id-48716' id='answer-label-48716' class=' answer'><span>Forward to primary and secondary DNS<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11808[]' id='answer-id-48717' class='answer   answerof-11808 ' value='48717'   \/><label for='answer-id-48717' id='answer-label-48717' class=' answer'><span>Forward to system DNS<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-46' style=';'><div id='questionWrap-46'  class='   watupro-question-id-11809'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>46. <\/span>Which statements about high availability (HA) for FortiGates are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_46' value='11809' \/><input type='hidden' id='answerType11809' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11809[]' id='answer-id-48718' class='answer   answerof-11809 ' value='48718'   \/><label for='answer-id-48718' id='answer-label-48718' class=' answer'><span>Virtual clustering can be configured between two FortiGate devices with multiple VDO<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11809[]' id='answer-id-48719' class='answer   answerof-11809 ' value='48719'   \/><label for='answer-id-48719' id='answer-label-48719' class=' answer'><span>Heartbeat interfaces are not required on the primary device.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11809[]' id='answer-id-48720' class='answer   answerof-11809 ' value='48720'   \/><label for='answer-id-48720' id='answer-label-48720' class=' answer'><span>HA management interface settings are synchronized between cluster members.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11809[]' id='answer-id-48721' class='answer   answerof-11809 ' value='48721'   \/><label for='answer-id-48721' id='answer-label-48721' class=' answer'><span>Sessions handled by UTM proxy cannot be synchronized.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-47' style=';'><div id='questionWrap-47'  class='   watupro-question-id-11810'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>47. <\/span>Which of the following statements about central NAT are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_47' value='11810' \/><input type='hidden' id='answerType11810' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11810[]' id='answer-id-48722' class='answer   answerof-11810 ' value='48722'   \/><label for='answer-id-48722' id='answer-label-48722' class=' answer'><span>IP tool references must be removed from existing firewall policies before enabling central NA<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11810[]' id='answer-id-48723' class='answer   answerof-11810 ' value='48723'   \/><label for='answer-id-48723' id='answer-label-48723' class=' answer'><span>Central NAT can be enabled or disabled from the CLI only.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11810[]' id='answer-id-48724' class='answer   answerof-11810 ' value='48724'   \/><label for='answer-id-48724' id='answer-label-48724' class=' answer'><span>Source NAT, using central NAT, requires at least one central SNAT policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11810[]' id='answer-id-48725' class='answer   answerof-11810 ' value='48725'   \/><label for='answer-id-48725' id='answer-label-48725' class=' answer'><span>Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall policy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-48' style=';'><div id='questionWrap-48'  class='   watupro-question-id-11811'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>48. <\/span>Which statement about the FortiGuard services for the FortiGate is true?<\/div><input type='hidden' name='question_id[]' id='qID_48' value='11811' \/><input type='hidden' id='answerType11811' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11811[]' id='answer-id-48726' class='answer   answerof-11811 ' value='48726'   \/><label for='answer-id-48726' id='answer-label-48726' class=' answer'><span>Antivirus signatures are downloaded locally on the FortiGate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11811[]' id='answer-id-48727' class='answer   answerof-11811 ' value='48727'   \/><label for='answer-id-48727' id='answer-label-48727' class=' answer'><span>FortiGate downloads IPS updates using UDP port 53 or 8888.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11811[]' id='answer-id-48728' class='answer   answerof-11811 ' value='48728'   \/><label for='answer-id-48728' id='answer-label-48728' class=' answer'><span>FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11811[]' id='answer-id-48729' class='answer   answerof-11811 ' value='48729'   \/><label for='answer-id-48729' id='answer-label-48729' class=' answer'><span>The web filtering database is downloaded locally on the FortiGate.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-49' style=';'><div id='questionWrap-49'  class='   watupro-question-id-11812'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>49. <\/span>Which statements about antivirus scanning using flow-based full scan are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_49' value='11812' \/><input type='hidden' id='answerType11812' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11812[]' id='answer-id-48730' class='answer   answerof-11812 ' value='48730'   \/><label for='answer-id-48730' id='answer-label-48730' class=' answer'><span>The antivirus engine starts scanning a file after the last packet arrives.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11812[]' id='answer-id-48731' class='answer   answerof-11812 ' value='48731'   \/><label for='answer-id-48731' id='answer-label-48731' class=' answer'><span>It does not support FortiSandbox inspection.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11812[]' id='answer-id-48732' class='answer   answerof-11812 ' value='48732'   \/><label for='answer-id-48732' id='answer-label-48732' class=' answer'><span>FortiGate can insert the block replacement page during the first connection attempt only if a virus is detected at the start of the TCP stream.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11812[]' id='answer-id-48733' class='answer   answerof-11812 ' value='48733'   \/><label for='answer-id-48733' id='answer-label-48733' class=' answer'><span>It uses the compact antivirus database.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-50' style=';'><div id='questionWrap-50'  class='   watupro-question-id-11813'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>50. <\/span>An administrator has configured a route-based IPsec VPN between two FortiGates. <br \/>\r<br>Which statement about this IPsec VPN configuration is true?<\/div><input type='hidden' name='question_id[]' id='qID_50' value='11813' \/><input type='hidden' id='answerType11813' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11813[]' id='answer-id-48734' class='answer   answerof-11813 ' value='48734'   \/><label for='answer-id-48734' id='answer-label-48734' class=' answer'><span>A phase 2 configuration is not required.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11813[]' id='answer-id-48735' class='answer   answerof-11813 ' value='48735'   \/><label for='answer-id-48735' id='answer-label-48735' class=' answer'><span>This VPN cannot be used as part of a hub and spoke topology.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11813[]' id='answer-id-48736' class='answer   answerof-11813 ' value='48736'   \/><label for='answer-id-48736' id='answer-label-48736' class=' answer'><span>The IPsec firewall policies must be placed at the top of the list.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11813[]' id='answer-id-48737' class='answer   answerof-11813 ' value='48737'   \/><label for='answer-id-48737' id='answer-label-48737' class=' answer'><span>A virtual IPsec interface is automatically created after the phase 1 configuration is completed.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-51' style=';'><div id='questionWrap-51'  class='   watupro-question-id-11814'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>51. <\/span>What information is flushed when the chunk-sizevalue is changed in the config dlp settings?<\/div><input type='hidden' name='question_id[]' id='qID_51' value='11814' \/><input type='hidden' id='answerType11814' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11814[]' id='answer-id-48738' class='answer   answerof-11814 ' value='48738'   \/><label for='answer-id-48738' id='answer-label-48738' class=' answer'><span>The database for DLP document fingerprinting<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11814[]' id='answer-id-48739' class='answer   answerof-11814 ' value='48739'   \/><label for='answer-id-48739' id='answer-label-48739' class=' answer'><span>The supported file types in the DLP filters<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11814[]' id='answer-id-48740' class='answer   answerof-11814 ' value='48740'   \/><label for='answer-id-48740' id='answer-label-48740' class=' answer'><span>The archived files and messages<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11814[]' id='answer-id-48741' class='answer   answerof-11814 ' value='48741'   \/><label for='answer-id-48741' id='answer-label-48741' class=' answer'><span>The file name patterns in the DLP filters<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-52' style=';'><div id='questionWrap-52'  class='   watupro-question-id-11815'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>52. <\/span>How does FortiGate select the central SNAT policy that is applied to a TCP session?<\/div><input type='hidden' name='question_id[]' id='qID_52' value='11815' \/><input type='hidden' id='answerType11815' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11815[]' id='answer-id-48742' class='answer   answerof-11815 ' value='48742'   \/><label for='answer-id-48742' id='answer-label-48742' class=' answer'><span>It selects the SNAT policy specified in the configuration of the outgoing interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11815[]' id='answer-id-48743' class='answer   answerof-11815 ' value='48743'   \/><label for='answer-id-48743' id='answer-label-48743' class=' answer'><span>It selects the first matching central-SNAT policy from top to bottom.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11815[]' id='answer-id-48744' class='answer   answerof-11815 ' value='48744'   \/><label for='answer-id-48744' id='answer-label-48744' class=' answer'><span>It selects the central-SNAT policy with the lowest priority.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11815[]' id='answer-id-48745' class='answer   answerof-11815 ' value='48745'   \/><label for='answer-id-48745' id='answer-label-48745' class=' answer'><span>It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-53' style=';'><div id='questionWrap-53'  class='   watupro-question-id-11816'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>53. <\/span>When using WPAD DNS method, what is the FQDN format that browsers use to query the DNS server?<\/div><input type='hidden' name='question_id[]' id='qID_53' value='11816' \/><input type='hidden' id='answerType11816' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11816[]' id='answer-id-48746' class='answer   answerof-11816 ' value='48746'   \/><label for='answer-id-48746' id='answer-label-48746' class=' answer'><span>wpad.&lt;local-domain&gt;<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11816[]' id='answer-id-48747' class='answer   answerof-11816 ' value='48747'   \/><label for='answer-id-48747' id='answer-label-48747' class=' answer'><span>srv_tcp.wpad.&lt;local-domain&gt;<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11816[]' id='answer-id-48748' class='answer   answerof-11816 ' value='48748'   \/><label for='answer-id-48748' id='answer-label-48748' class=' answer'><span>srv_proxy.&lt;local-domain&gt;\/wpad.dat<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11816[]' id='answer-id-48749' class='answer   answerof-11816 ' value='48749'   \/><label for='answer-id-48749' id='answer-label-48749' class=' answer'><span>proxy.&lt;local-domain&gt;.wpad<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-54' style=';'><div id='questionWrap-54'  class='   watupro-question-id-11817'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>54. <\/span>An administrator is using the FortiGate built-in sniffer to capture HTTP traffic between a client and a server, however, the sniffer output shows only the packets related with TCP session setups and disconnections. <br \/>\r<br>Why?<\/div><input type='hidden' name='question_id[]' id='qID_54' value='11817' \/><input type='hidden' id='answerType11817' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11817[]' id='answer-id-48750' class='answer   answerof-11817 ' value='48750'   \/><label for='answer-id-48750' id='answer-label-48750' class=' answer'><span>The administrator is running the sniffer on the internal interface only.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11817[]' id='answer-id-48751' class='answer   answerof-11817 ' value='48751'   \/><label for='answer-id-48751' id='answer-label-48751' class=' answer'><span>The filter used in the sniffer matches the traffic only in one direction.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11817[]' id='answer-id-48752' class='answer   answerof-11817 ' value='48752'   \/><label for='answer-id-48752' id='answer-label-48752' class=' answer'><span>The FortiGate is doing content inspection.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11817[]' id='answer-id-48753' class='answer   answerof-11817 ' value='48753'   \/><label for='answer-id-48753' id='answer-label-48753' class=' answer'><span>TCP traffic is being offloaded to an NP6.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-55' style=';'><div id='questionWrap-55'  class='   watupro-question-id-11818'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>55. <\/span>Which of the following statements about advanced AD access mode for FSSO collector agent are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_55' value='11818' \/><input type='hidden' id='answerType11818' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11818[]' id='answer-id-48754' class='answer   answerof-11818 ' value='48754'   \/><label for='answer-id-48754' id='answer-label-48754' class=' answer'><span>It is only supported if DC agents are deployed.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11818[]' id='answer-id-48755' class='answer   answerof-11818 ' value='48755'   \/><label for='answer-id-48755' id='answer-label-48755' class=' answer'><span>FortiGate can act as an LDAP client configure the group filters.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11818[]' id='answer-id-48756' class='answer   answerof-11818 ' value='48756'   \/><label for='answer-id-48756' id='answer-label-48756' class=' answer'><span>It supports monitoring of nested groups.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11818[]' id='answer-id-48757' class='answer   answerof-11818 ' value='48757'   \/><label for='answer-id-48757' id='answer-label-48757' class=' answer'><span>It uses the Windows convention for naming, that is, DomainUsername.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-56' style=';'><div id='questionWrap-56'  class='   watupro-question-id-11819'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>56. <\/span>Which configuration objects can be selected for the Source filed of a firewall policy? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_56' value='11819' \/><input type='hidden' id='answerType11819' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11819[]' id='answer-id-48758' class='answer   answerof-11819 ' value='48758'   \/><label for='answer-id-48758' id='answer-label-48758' class=' answer'><span>FQDN address<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11819[]' id='answer-id-48759' class='answer   answerof-11819 ' value='48759'   \/><label for='answer-id-48759' id='answer-label-48759' class=' answer'><span>IP pool<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11819[]' id='answer-id-48760' class='answer   answerof-11819 ' value='48760'   \/><label for='answer-id-48760' id='answer-label-48760' class=' answer'><span>User or user group<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11819[]' id='answer-id-48761' class='answer   answerof-11819 ' value='48761'   \/><label for='answer-id-48761' id='answer-label-48761' class=' answer'><span>Firewall service<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-57' style=';'><div id='questionWrap-57'  class='   watupro-question-id-11820'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>57. <\/span>Examine the exhibit, which contains a virtual IP and a firewall policy configuration. <br \/>\r<br><br><img decoding=\"async\" width=649 height=368 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image058.jpg\" v:shapes=\"_x0000_i1053\"><br><br \/>\r<br>The WAN(port1) interface has the IP address 10.200.1.1\/24. The LAN(port2) interface has the IP address 10.0.1.254\/24. <br \/>\r<br>The top firewall policy has NAT enabled using outgoing interface address. The second firewall policy configured with a virtual IP (VIP) as the destination address. <br \/>\r<br>Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10\/24?<\/div><input type='hidden' name='question_id[]' id='qID_57' value='11820' \/><input type='hidden' id='answerType11820' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11820[]' id='answer-id-48762' class='answer   answerof-11820 ' value='48762'   \/><label for='answer-id-48762' id='answer-label-48762' class=' answer'><span>10.200.1.1<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11820[]' id='answer-id-48763' class='answer   answerof-11820 ' value='48763'   \/><label for='answer-id-48763' id='answer-label-48763' class=' answer'><span>10.0.1.254<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11820[]' id='answer-id-48764' class='answer   answerof-11820 ' value='48764'   \/><label for='answer-id-48764' id='answer-label-48764' class=' answer'><span>Any available IP address in the WAN(port1) subnet 10.200.1.0\/24<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11820[]' id='answer-id-48765' class='answer   answerof-11820 ' value='48765'   \/><label for='answer-id-48765' id='answer-label-48765' class=' answer'><span>10.200.1.10<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-58' style=';'><div id='questionWrap-58'  class='   watupro-question-id-11821'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>58. <\/span>Which statement about data leak prevention (DLP) on a FortiGate is true?<\/div><input type='hidden' name='question_id[]' id='qID_58' value='11821' \/><input type='hidden' id='answerType11821' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11821[]' id='answer-id-48766' class='answer   answerof-11821 ' value='48766'   \/><label for='answer-id-48766' id='answer-label-48766' class=' answer'><span>Traffic shaping can be applied to DLP sensors.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11821[]' id='answer-id-48767' class='answer   answerof-11821 ' value='48767'   \/><label for='answer-id-48767' id='answer-label-48767' class=' answer'><span>It can be applied to a firewall policy in a flow-based VDO<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11821[]' id='answer-id-48768' class='answer   answerof-11821 ' value='48768'   \/><label for='answer-id-48768' id='answer-label-48768' class=' answer'><span>Files can be sent to FortiSandbox for detecting DLP threats.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11821[]' id='answer-id-48769' class='answer   answerof-11821 ' value='48769'   \/><label for='answer-id-48769' id='answer-label-48769' class=' answer'><span>It can archive files and messages.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-59' style=';'><div id='questionWrap-59'  class='   watupro-question-id-11822'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>59. <\/span>Which statements about an IPv6-over-IPv4 IPsec configuration are correct? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_59' value='11822' \/><input type='hidden' id='answerType11822' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11822[]' id='answer-id-48770' class='answer   answerof-11822 ' value='48770'   \/><label for='answer-id-48770' id='answer-label-48770' class=' answer'><span>The remote gateway IP must be an IPv6 address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11822[]' id='answer-id-48771' class='answer   answerof-11822 ' value='48771'   \/><label for='answer-id-48771' id='answer-label-48771' class=' answer'><span>The source quick mode selector must be an IPv4 address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11822[]' id='answer-id-48772' class='answer   answerof-11822 ' value='48772'   \/><label for='answer-id-48772' id='answer-label-48772' class=' answer'><span>The local gateway IP must an IPv4 address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11822[]' id='answer-id-48773' class='answer   answerof-11822 ' value='48773'   \/><label for='answer-id-48773' id='answer-label-48773' class=' answer'><span>The destination quick mode selector must be an IPv6 address.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-60' style=';'><div id='questionWrap-60'  class='   watupro-question-id-11823'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>60. <\/span>Which statements about IP-based explicit proxy authentication are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_60' value='11823' \/><input type='hidden' id='answerType11823' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11823[]' id='answer-id-48774' class='answer   answerof-11823 ' value='48774'   \/><label for='answer-id-48774' id='answer-label-48774' class=' answer'><span>IP-based authentication is best suited to authenticating users behind a NAT device.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11823[]' id='answer-id-48775' class='answer   answerof-11823 ' value='48775'   \/><label for='answer-id-48775' id='answer-label-48775' class=' answer'><span>Sessions from the same source address are treated as a single user.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11823[]' id='answer-id-48776' class='answer   answerof-11823 ' value='48776'   \/><label for='answer-id-48776' id='answer-label-48776' class=' answer'><span>IP-based authentication consumes less FortiGate\u2019s memory than session-based authentication.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11823[]' id='answer-id-48777' class='answer   answerof-11823 ' value='48777'   \/><label for='answer-id-48777' id='answer-label-48777' class=' answer'><span>FortiGate remembers authenticated sessions using browser cookies.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-61' style=';'><div id='questionWrap-61'  class='   watupro-question-id-11824'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>61. <\/span>View the Exhibit. <br \/>\r<br><br><img decoding=\"async\" width=650 height=110 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image060.jpg\" v:shapes=\"_x0000_i1054\"><br><br \/>\r<br>The administrator needs to confirm that FortiGate 2 is properly routing that traffic to the 10.0.1.0\/24 subnet. The administrator needs to confirm it by sending ICMP pings to FortiGate 2 from the CLI of FortiGate 1. <br \/>\r<br>What ping option needs to be enabled before running the ping?<\/div><input type='hidden' name='question_id[]' id='qID_61' value='11824' \/><input type='hidden' id='answerType11824' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11824[]' id='answer-id-48778' class='answer   answerof-11824 ' value='48778'   \/><label for='answer-id-48778' id='answer-label-48778' class=' answer'><span>Execute ping-options source port1<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11824[]' id='answer-id-48779' class='answer   answerof-11824 ' value='48779'   \/><label for='answer-id-48779' id='answer-label-48779' class=' answer'><span>Execute ping-options source 10.200.1.1.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11824[]' id='answer-id-48780' class='answer   answerof-11824 ' value='48780'   \/><label for='answer-id-48780' id='answer-label-48780' class=' answer'><span>Execute ping-options source 10.200.1.2<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11824[]' id='answer-id-48781' class='answer   answerof-11824 ' value='48781'   \/><label for='answer-id-48781' id='answer-label-48781' class=' answer'><span>Execute ping-options source 10.0.1.254<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-62' style=';'><div id='questionWrap-62'  class='   watupro-question-id-11825'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>62. <\/span>How can you format the FortiGate flash disk?<\/div><input type='hidden' name='question_id[]' id='qID_62' value='11825' \/><input type='hidden' id='answerType11825' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11825[]' id='answer-id-48782' class='answer   answerof-11825 ' value='48782'   \/><label for='answer-id-48782' id='answer-label-48782' class=' answer'><span>Load the hardware test (HQIP) image.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11825[]' id='answer-id-48783' class='answer   answerof-11825 ' value='48783'   \/><label for='answer-id-48783' id='answer-label-48783' class=' answer'><span>Execute the CLI command execute formatlogdisk.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11825[]' id='answer-id-48784' class='answer   answerof-11825 ' value='48784'   \/><label for='answer-id-48784' id='answer-label-48784' class=' answer'><span>Load a debug FortiOS image.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11825[]' id='answer-id-48785' class='answer   answerof-11825 ' value='48785'   \/><label for='answer-id-48785' id='answer-label-48785' class=' answer'><span>Select the format boot device option from the BIOS menu.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-63' style=';'><div id='questionWrap-63'  class='   watupro-question-id-11826'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>63. <\/span>How do you configure inline SSL inspection on a firewall policy? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_63' value='11826' \/><input type='hidden' id='answerType11826' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11826[]' id='answer-id-48786' class='answer   answerof-11826 ' value='48786'   \/><label for='answer-id-48786' id='answer-label-48786' class=' answer'><span>Enable one or more flow-based security profiles on the firewall policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11826[]' id='answer-id-48787' class='answer   answerof-11826 ' value='48787'   \/><label for='answer-id-48787' id='answer-label-48787' class=' answer'><span>Enable the SSL\/SSH Inspection profile on the firewall policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11826[]' id='answer-id-48788' class='answer   answerof-11826 ' value='48788'   \/><label for='answer-id-48788' id='answer-label-48788' class=' answer'><span>Execute the inline ssl inspection CLI command.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11826[]' id='answer-id-48789' class='answer   answerof-11826 ' value='48789'   \/><label for='answer-id-48789' id='answer-label-48789' class=' answer'><span>Enable one or more proxy-based security profiles on the firewall policy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-64' style=';'><div id='questionWrap-64'  class='   watupro-question-id-11827'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>64. <\/span>Which traffic sessions can be offloaded to a NP6 processor? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_64' value='11827' \/><input type='hidden' id='answerType11827' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11827[]' id='answer-id-48790' class='answer   answerof-11827 ' value='48790'   \/><label for='answer-id-48790' id='answer-label-48790' class=' answer'><span>IPv6<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11827[]' id='answer-id-48791' class='answer   answerof-11827 ' value='48791'   \/><label for='answer-id-48791' id='answer-label-48791' class=' answer'><span>RIP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11827[]' id='answer-id-48792' class='answer   answerof-11827 ' value='48792'   \/><label for='answer-id-48792' id='answer-label-48792' class=' answer'><span>GRE<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11827[]' id='answer-id-48793' class='answer   answerof-11827 ' value='48793'   \/><label for='answer-id-48793' id='answer-label-48793' class=' answer'><span>NAT64<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-65' style=';'><div id='questionWrap-65'  class='   watupro-question-id-11828'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>65. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=498 height=247 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image062.jpg\" v:shapes=\"_x0000_i1055\"><br><br \/>\r<br>Based on this output, which statements are correct? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_65' value='11828' \/><input type='hidden' id='answerType11828' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11828[]' id='answer-id-48794' class='answer   answerof-11828 ' value='48794'   \/><label for='answer-id-48794' id='answer-label-48794' class=' answer'><span>FortiGate generated an event log for system conserve mode.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11828[]' id='answer-id-48795' class='answer   answerof-11828 ' value='48795'   \/><label for='answer-id-48795' id='answer-label-48795' class=' answer'><span>FortiGate has entered in to system conserve mode.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11828[]' id='answer-id-48796' class='answer   answerof-11828 ' value='48796'   \/><label for='answer-id-48796' id='answer-label-48796' class=' answer'><span>By default, the FortiGate blocks new sessions.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11828[]' id='answer-id-48797' class='answer   answerof-11828 ' value='48797'   \/><label for='answer-id-48797' id='answer-label-48797' class=' answer'><span>FortiGate changed the global av-failopen settings to idledrop.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-66' style=';'><div id='questionWrap-66'  class='   watupro-question-id-11829'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>66. <\/span>An administrator has blocked Netflix login in a cloud access security inspection (CASI) profile. The administrator has also applied the CASI profile to a firewall policy. <br \/>\r<br>What else is required for the CASI profile to work properly?<\/div><input type='hidden' name='question_id[]' id='qID_66' value='11829' \/><input type='hidden' id='answerType11829' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11829[]' id='answer-id-48798' class='answer   answerof-11829 ' value='48798'   \/><label for='answer-id-48798' id='answer-label-48798' class=' answer'><span>You must enable logging for security events on the firewall policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11829[]' id='answer-id-48799' class='answer   answerof-11829 ' value='48799'   \/><label for='answer-id-48799' id='answer-label-48799' class=' answer'><span>You must activate a FortiCloud account.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11829[]' id='answer-id-48800' class='answer   answerof-11829 ' value='48800'   \/><label for='answer-id-48800' id='answer-label-48800' class=' answer'><span>You must apply an application control profile to the firewall policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11829[]' id='answer-id-48801' class='answer   answerof-11829 ' value='48801'   \/><label for='answer-id-48801' id='answer-label-48801' class=' answer'><span>You must enable SSL inspection on the firewall policy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-67' style=';'><div id='questionWrap-67'  class='   watupro-question-id-11830'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>67. <\/span>How does FortiGate look for a matching firewall policy to process traffic?<\/div><input type='hidden' name='question_id[]' id='qID_67' value='11830' \/><input type='hidden' id='answerType11830' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11830[]' id='answer-id-48802' class='answer   answerof-11830 ' value='48802'   \/><label for='answer-id-48802' id='answer-label-48802' class=' answer'><span>From top to bottom, based on the sequence numbers.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11830[]' id='answer-id-48803' class='answer   answerof-11830 ' value='48803'   \/><label for='answer-id-48803' id='answer-label-48803' class=' answer'><span>Based on best match.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11830[]' id='answer-id-48804' class='answer   answerof-11830 ' value='48804'   \/><label for='answer-id-48804' id='answer-label-48804' class=' answer'><span>From top to bottom, based on the policy ID numbers.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11830[]' id='answer-id-48805' class='answer   answerof-11830 ' value='48805'   \/><label for='answer-id-48805' id='answer-label-48805' class=' answer'><span>From lower to higher, based on the priority value.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-68' style=';'><div id='questionWrap-68'  class='   watupro-question-id-11831'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>68. <\/span>How do you configure a FortiGate to do traffic shaping of P2P traffic, such as BitTorrent?<\/div><input type='hidden' name='question_id[]' id='qID_68' value='11831' \/><input type='hidden' id='answerType11831' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11831[]' id='answer-id-48806' class='answer   answerof-11831 ' value='48806'   \/><label for='answer-id-48806' id='answer-label-48806' class=' answer'><span>Apply an application control profile allowing BitTorrent to a firewall policy and configure a traffic shaping policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11831[]' id='answer-id-48807' class='answer   answerof-11831 ' value='48807'   \/><label for='answer-id-48807' id='answer-label-48807' class=' answer'><span>Enable the shape option in a firewall policy with service set to BitTorrent.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11831[]' id='answer-id-48808' class='answer   answerof-11831 ' value='48808'   \/><label for='answer-id-48808' id='answer-label-48808' class=' answer'><span>Apply a traffic shaper to a BitTorrent entry in the SSL\/SSH inspection profile.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11831[]' id='answer-id-48809' class='answer   answerof-11831 ' value='48809'   \/><label for='answer-id-48809' id='answer-label-48809' class=' answer'><span>Apply a traffic shaper to a protocol options profile.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-69' style=';'><div id='questionWrap-69'  class='   watupro-question-id-11832'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>69. <\/span>Which file names will match the *.tiff file name pattern configured in a data leak prevention filter? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_69' value='11832' \/><input type='hidden' id='answerType11832' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11832[]' id='answer-id-48810' class='answer   answerof-11832 ' value='48810'   \/><label for='answer-id-48810' id='answer-label-48810' class=' answer'><span>tiff.tiff<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11832[]' id='answer-id-48811' class='answer   answerof-11832 ' value='48811'   \/><label for='answer-id-48811' id='answer-label-48811' class=' answer'><span>tiff.png<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11832[]' id='answer-id-48812' class='answer   answerof-11832 ' value='48812'   \/><label for='answer-id-48812' id='answer-label-48812' class=' answer'><span>tiff.jpeg<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11832[]' id='answer-id-48813' class='answer   answerof-11832 ' value='48813'   \/><label for='answer-id-48813' id='answer-label-48813' class=' answer'><span>gif.tiff<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-70' style=';'><div id='questionWrap-70'  class='   watupro-question-id-11833'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>70. <\/span>An administrator has configured a dialup IPsec VPN with XAuth. <br \/>\r<br>Which method statement best describes this scenario?<\/div><input type='hidden' name='question_id[]' id='qID_70' value='11833' \/><input type='hidden' id='answerType11833' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11833[]' id='answer-id-48814' class='answer   answerof-11833 ' value='48814'   \/><label for='answer-id-48814' id='answer-label-48814' class=' answer'><span>Only digital certificates will be accepted as an authentication method in phase 1.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11833[]' id='answer-id-48815' class='answer   answerof-11833 ' value='48815'   \/><label for='answer-id-48815' id='answer-label-48815' class=' answer'><span>Dialup clients must provide a username and password for authentication.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11833[]' id='answer-id-48816' class='answer   answerof-11833 ' value='48816'   \/><label for='answer-id-48816' id='answer-label-48816' class=' answer'><span>Phase 1 negotiations will skip pre-shared key exchange.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11833[]' id='answer-id-48817' class='answer   answerof-11833 ' value='48817'   \/><label for='answer-id-48817' id='answer-label-48817' class=' answer'><span>Dialup clients must provide their local ID during phase 2 negotiations.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-71' style=';'><div id='questionWrap-71'  class='   watupro-question-id-11834'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>71. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=619 height=291 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image064.jpg\" v:shapes=\"_x0000_i1056\"><br><br \/>\r<br>VDOM1 is operating is transparent mode VDOM2 is operating in NAT Route mode. There is an inter-VDOM link between both VDOMs. A client workstation with the IP address 10.0.1.10\/24 is connected to port2. A web server with the IP address 10.200.1.2\/24 is connected to port1. <br \/>\r<br>What is required in the FortiGate configuration to route and allow connections from the client workstation to the web server? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_71' value='11834' \/><input type='hidden' id='answerType11834' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11834[]' id='answer-id-48818' class='answer   answerof-11834 ' value='48818'   \/><label for='answer-id-48818' id='answer-label-48818' class=' answer'><span>A static or dynamic route in VDOM2 with the subnet 10.0.1.0\/24 as the destination.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11834[]' id='answer-id-48819' class='answer   answerof-11834 ' value='48819'   \/><label for='answer-id-48819' id='answer-label-48819' class=' answer'><span>A static or dynamic route in VDOM1 with the subnet 10.200.1.0\/24 as the destination.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11834[]' id='answer-id-48820' class='answer   answerof-11834 ' value='48820'   \/><label for='answer-id-48820' id='answer-label-48820' class=' answer'><span>One firewall policy in VDOM1 with port2 as the source interface and InterVDOM0 as the destination interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11834[]' id='answer-id-48821' class='answer   answerof-11834 ' value='48821'   \/><label for='answer-id-48821' id='answer-label-48821' class=' answer'><span>One firewall policy in VDOM2 with InterVDOM1 as the source interface and port1 as the destination interface.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-72' style=';'><div id='questionWrap-72'  class='   watupro-question-id-11835'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>72. <\/span>Which component of FortiOS performs application control inspection?<\/div><input type='hidden' name='question_id[]' id='qID_72' value='11835' \/><input type='hidden' id='answerType11835' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11835[]' id='answer-id-48822' class='answer   answerof-11835 ' value='48822'   \/><label for='answer-id-48822' id='answer-label-48822' class=' answer'><span>Kernel<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11835[]' id='answer-id-48823' class='answer   answerof-11835 ' value='48823'   \/><label for='answer-id-48823' id='answer-label-48823' class=' answer'><span>Antivirus engine<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11835[]' id='answer-id-48824' class='answer   answerof-11835 ' value='48824'   \/><label for='answer-id-48824' id='answer-label-48824' class=' answer'><span>IPS engine<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11835[]' id='answer-id-48825' class='answer   answerof-11835 ' value='48825'   \/><label for='answer-id-48825' id='answer-label-48825' class=' answer'><span>Application control engine<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-73' style=';'><div id='questionWrap-73'  class='   watupro-question-id-11836'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>73. <\/span>Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_73' value='11836' \/><input type='hidden' id='answerType11836' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11836[]' id='answer-id-48826' class='answer   answerof-11836 ' value='48826'   \/><label for='answer-id-48826' id='answer-label-48826' class=' answer'><span>They support GRE-over-IPsec.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11836[]' id='answer-id-48827' class='answer   answerof-11836 ' value='48827'   \/><label for='answer-id-48827' id='answer-label-48827' class=' answer'><span>They can be configured in both NAT\/Route and transparent operation modes.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11836[]' id='answer-id-48828' class='answer   answerof-11836 ' value='48828'   \/><label for='answer-id-48828' id='answer-label-48828' class=' answer'><span>They require two firewall policies: one for each direction of traffic flow.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11836[]' id='answer-id-48829' class='answer   answerof-11836 ' value='48829'   \/><label for='answer-id-48829' id='answer-label-48829' class=' answer'><span>They support L2TP-over-IPsec.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-74' style=';'><div id='questionWrap-74'  class='   watupro-question-id-11837'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>74. <\/span>What statement describes what DNS64 does?<\/div><input type='hidden' name='question_id[]' id='qID_74' value='11837' \/><input type='hidden' id='answerType11837' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11837[]' id='answer-id-48830' class='answer   answerof-11837 ' value='48830'   \/><label for='answer-id-48830' id='answer-label-48830' class=' answer'><span>Converts DNS A record lookups to AAAA record lookups.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11837[]' id='answer-id-48831' class='answer   answerof-11837 ' value='48831'   \/><label for='answer-id-48831' id='answer-label-48831' class=' answer'><span>Translates the destination IPv6 address of the DNS traffic to an IPv4 address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11837[]' id='answer-id-48832' class='answer   answerof-11837 ' value='48832'   \/><label for='answer-id-48832' id='answer-label-48832' class=' answer'><span>Synthesizes DNS AAAA records from A records.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11837[]' id='answer-id-48833' class='answer   answerof-11837 ' value='48833'   \/><label for='answer-id-48833' id='answer-label-48833' class=' answer'><span>Translates the destination IPv4 address of the DNS traffic to an IPv6 address.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-75' style=';'><div id='questionWrap-75'  class='   watupro-question-id-11838'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>75. <\/span>What does the command diagnose debug fsso-polling refresh-user do?<\/div><input type='hidden' name='question_id[]' id='qID_75' value='11838' \/><input type='hidden' id='answerType11838' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11838[]' id='answer-id-48834' class='answer   answerof-11838 ' value='48834'   \/><label for='answer-id-48834' id='answer-label-48834' class=' answer'><span>It refreshes user group information form any servers connected to the FortiGate using a collector agent.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11838[]' id='answer-id-48835' class='answer   answerof-11838 ' value='48835'   \/><label for='answer-id-48835' id='answer-label-48835' class=' answer'><span>It refreshes all users learned through agentless polling.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11838[]' id='answer-id-48836' class='answer   answerof-11838 ' value='48836'   \/><label for='answer-id-48836' id='answer-label-48836' class=' answer'><span>It displays status information and some statistics related with the polls done by FortiGate on each D<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11838[]' id='answer-id-48837' class='answer   answerof-11838 ' value='48837'   \/><label for='answer-id-48837' id='answer-label-48837' class=' answer'><span>It enables agentless polling mode real-time debug.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-76' style=';'><div id='questionWrap-76'  class='   watupro-question-id-11839'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>76. <\/span>Why must you use aggressive mode when a local FortiGate IPsec gateway hosts multiple dialup tunnels?<\/div><input type='hidden' name='question_id[]' id='qID_76' value='11839' \/><input type='hidden' id='answerType11839' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11839[]' id='answer-id-48838' class='answer   answerof-11839 ' value='48838'   \/><label for='answer-id-48838' id='answer-label-48838' class=' answer'><span>The FortiGate is able to handle NATed connections only with aggressive mode.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11839[]' id='answer-id-48839' class='answer   answerof-11839 ' value='48839'   \/><label for='answer-id-48839' id='answer-label-48839' class=' answer'><span>FortiClient supports aggressive mode.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11839[]' id='answer-id-48840' class='answer   answerof-11839 ' value='48840'   \/><label for='answer-id-48840' id='answer-label-48840' class=' answer'><span>The remote peers are able to provide their peer IDs in the first message with aggressive mode.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11839[]' id='answer-id-48841' class='answer   answerof-11839 ' value='48841'   \/><label for='answer-id-48841' id='answer-label-48841' class=' answer'><span>Main mode does not support XAuth for user authentication.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-77' style=';'><div id='questionWrap-77'  class='   watupro-question-id-11840'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>77. <\/span>An administrator has configured the following settings: <br \/>\r<br><br><img decoding=\"async\" width=311 height=142 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image066.jpg\" v:shapes=\"_x0000_i1057\"><br><br \/>\r<br>What does the configuration do? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_77' value='11840' \/><input type='hidden' id='answerType11840' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11840[]' id='answer-id-48842' class='answer   answerof-11840 ' value='48842'   \/><label for='answer-id-48842' id='answer-label-48842' class=' answer'><span>Reduces the amount of logs generated by denied traffic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11840[]' id='answer-id-48843' class='answer   answerof-11840 ' value='48843'   \/><label for='answer-id-48843' id='answer-label-48843' class=' answer'><span>Enforces device detection on all interfaces for 30 minutes.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11840[]' id='answer-id-48844' class='answer   answerof-11840 ' value='48844'   \/><label for='answer-id-48844' id='answer-label-48844' class=' answer'><span>Blocks denied users for 30 minutes.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11840[]' id='answer-id-48845' class='answer   answerof-11840 ' value='48845'   \/><label for='answer-id-48845' id='answer-label-48845' class=' answer'><span>Creates a session for traffic being denied.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-78' style=';'><div id='questionWrap-78'  class='   watupro-question-id-11841'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>78. <\/span>Which statements about FortiGate inspection modes are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_78' value='11841' \/><input type='hidden' id='answerType11841' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11841[]' id='answer-id-48846' class='answer   answerof-11841 ' value='48846'   \/><label for='answer-id-48846' id='answer-label-48846' class=' answer'><span>The default inspection mode is proxy based.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11841[]' id='answer-id-48847' class='answer   answerof-11841 ' value='48847'   \/><label for='answer-id-48847' id='answer-label-48847' class=' answer'><span>Switching from proxy-based mode to flow-based, then back to proxy-based mode, will not result in the original configuration.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11841[]' id='answer-id-48848' class='answer   answerof-11841 ' value='48848'   \/><label for='answer-id-48848' id='answer-label-48848' class=' answer'><span>Proxy-based inspection is not available in VDOMs operating in transparent mode.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11841[]' id='answer-id-48849' class='answer   answerof-11841 ' value='48849'   \/><label for='answer-id-48849' id='answer-label-48849' class=' answer'><span>Flow-based profiles must be manually converted to proxy-based profiles before changing the inspection mode from flow based to proxy based.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-79' style=';'><div id='questionWrap-79'  class='   watupro-question-id-11842'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>79. <\/span>Examine the following interface configuration on a FortiGate in transparent mode: <br \/>\r<br><br><img decoding=\"async\" width=295 height=79 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image068.jpg\" v:shapes=\"_x0000_i1058\"><br><br \/>\r<br>Which statement about this configuration is correct?<\/div><input type='hidden' name='question_id[]' id='qID_79' value='11842' \/><input type='hidden' id='answerType11842' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11842[]' id='answer-id-48850' class='answer   answerof-11842 ' value='48850'   \/><label for='answer-id-48850' id='answer-label-48850' class=' answer'><span>The FortiGate generates spanning tree BPDU frames.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11842[]' id='answer-id-48851' class='answer   answerof-11842 ' value='48851'   \/><label for='answer-id-48851' id='answer-label-48851' class=' answer'><span>The FortiGate device forwards received spanning tree BPDU frames.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11842[]' id='answer-id-48852' class='answer   answerof-11842 ' value='48852'   \/><label for='answer-id-48852' id='answer-label-48852' class=' answer'><span>The FortiGate can block an interface if a layer-2 loop is detected.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11842[]' id='answer-id-48853' class='answer   answerof-11842 ' value='48853'   \/><label for='answer-id-48853' id='answer-label-48853' class=' answer'><span>Ethernet layer-2 loops are likely to occur.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-80' style=';'><div id='questionWrap-80'  class='   watupro-question-id-11843'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>80. <\/span>Examine this PAC file configuration. <br \/>\r<br><br><img decoding=\"async\" width=578 height=142 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image070.jpg\" v:shapes=\"_x0000_i1059\"><br><br \/>\r<br>Which of the following statements are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_80' value='11843' \/><input type='hidden' id='answerType11843' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11843[]' id='answer-id-48854' class='answer   answerof-11843 ' value='48854'   \/><label for='answer-id-48854' id='answer-label-48854' class=' answer'><span>Browsers can be configured to retrieve this PAC file from the FortiGate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11843[]' id='answer-id-48855' class='answer   answerof-11843 ' value='48855'   \/><label for='answer-id-48855' id='answer-label-48855' class=' answer'><span>Any web request to the 172.25.120.0\/24 subnet is allowed to bypass the proxy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11843[]' id='answer-id-48856' class='answer   answerof-11843 ' value='48856'   \/><label for='answer-id-48856' id='answer-label-48856' class=' answer'><span>All requests not made to Fortinet.com or the 172.25.120.0\/24 subnet, have to go through altproxy.corp.com: 8060.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11843[]' id='answer-id-48857' class='answer   answerof-11843 ' value='48857'   \/><label for='answer-id-48857' id='answer-label-48857' class=' answer'><span>Any web request fortinet.com is allowed to bypass the proxy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-81' style=';'><div id='questionWrap-81'  class='   watupro-question-id-11844'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>81. <\/span>In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?<\/div><input type='hidden' name='question_id[]' id='qID_81' value='11844' \/><input type='hidden' id='answerType11844' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11844[]' id='answer-id-48858' class='answer   answerof-11844 ' value='48858'   \/><label for='answer-id-48858' id='answer-label-48858' class=' answer'><span>Client &gt; primary FortiGate&gt; secondary FortiGate&gt; primary FortiGate&gt; web server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11844[]' id='answer-id-48859' class='answer   answerof-11844 ' value='48859'   \/><label for='answer-id-48859' id='answer-label-48859' class=' answer'><span>Client &gt; secondary FortiGate&gt; web server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11844[]' id='answer-id-48860' class='answer   answerof-11844 ' value='48860'   \/><label for='answer-id-48860' id='answer-label-48860' class=' answer'><span>Client &gt;secondary FortiGate&gt; primary FortiGate&gt; web server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11844[]' id='answer-id-48861' class='answer   answerof-11844 ' value='48861'   \/><label for='answer-id-48861' id='answer-label-48861' class=' answer'><span>Client&gt; primary FortiGate&gt; secondary FortiGate&gt; web server.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-82' style=';'><div id='questionWrap-82'  class='   watupro-question-id-11845'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>82. <\/span>A FortiGate is operating in NAT\/Route mode and configured with two virtual LAN (VLAN) sub-interfaces added to the same physical interface. <br \/>\r<br>Which statement about the VLAN IDs in this scenario is true?<\/div><input type='hidden' name='question_id[]' id='qID_82' value='11845' \/><input type='hidden' id='answerType11845' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11845[]' id='answer-id-48862' class='answer   answerof-11845 ' value='48862'   \/><label for='answer-id-48862' id='answer-label-48862' class=' answer'><span>The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11845[]' id='answer-id-48863' class='answer   answerof-11845 ' value='48863'   \/><label for='answer-id-48863' id='answer-label-48863' class=' answer'><span>The two VLAN sub-interfaces must have different VLAN IDs.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11845[]' id='answer-id-48864' class='answer   answerof-11845 ' value='48864'   \/><label for='answer-id-48864' id='answer-label-48864' class=' answer'><span>The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in the same subnet.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11845[]' id='answer-id-48865' class='answer   answerof-11845 ' value='48865'   \/><label for='answer-id-48865' id='answer-label-48865' class=' answer'><span>The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-83' style=';'><div id='questionWrap-83'  class='   watupro-question-id-11846'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>83. <\/span>Which of the following statements are true when using Web Proxy Auto-discovery Protocol (WPAD) with the DHCP discovery method? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_83' value='11846' \/><input type='hidden' id='answerType11846' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11846[]' id='answer-id-48866' class='answer   answerof-11846 ' value='48866'   \/><label for='answer-id-48866' id='answer-label-48866' class=' answer'><span>The browser sends a DHCPINFORM request to the DHCP server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11846[]' id='answer-id-48867' class='answer   answerof-11846 ' value='48867'   \/><label for='answer-id-48867' id='answer-label-48867' class=' answer'><span>The browser will need to be preconfigured with the DHCP server\u2019s IP address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11846[]' id='answer-id-48868' class='answer   answerof-11846 ' value='48868'   \/><label for='answer-id-48868' id='answer-label-48868' class=' answer'><span>The DHCP server provides the PAC file for download.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11846[]' id='answer-id-48869' class='answer   answerof-11846 ' value='48869'   \/><label for='answer-id-48869' id='answer-label-48869' class=' answer'><span>If the DHCP method fails, browsers will try the DNS method.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-84' style=';'><div id='questionWrap-84'  class='   watupro-question-id-11847'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>84. <\/span>What inspections are executed by the IPS engine? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_84' value='11847' \/><input type='hidden' id='answerType11847' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11847[]' id='answer-id-48870' class='answer   answerof-11847 ' value='48870'   \/><label for='answer-id-48870' id='answer-label-48870' class=' answer'><span>Application control<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11847[]' id='answer-id-48871' class='answer   answerof-11847 ' value='48871'   \/><label for='answer-id-48871' id='answer-label-48871' class=' answer'><span>Flow-based data leak prevention<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11847[]' id='answer-id-48872' class='answer   answerof-11847 ' value='48872'   \/><label for='answer-id-48872' id='answer-label-48872' class=' answer'><span>Proxy-based antispam<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11847[]' id='answer-id-48873' class='answer   answerof-11847 ' value='48873'   \/><label for='answer-id-48873' id='answer-label-48873' class=' answer'><span>Flow-based web filtering<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11847[]' id='answer-id-48874' class='answer   answerof-11847 ' value='48874'   \/><label for='answer-id-48874' id='answer-label-48874' class=' answer'><span>Proxy-based antivirus<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-85' style=';'><div id='questionWrap-85'  class='   watupro-question-id-11848'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>85. <\/span>Examine the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=649 height=94 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image072.jpg\" v:shapes=\"_x0000_i1060\"><br><br \/>\r<br>A client workstation is connected to FortiGate port2. The Fortigate port1 is connected to an ISP router. Port2 and port3 are both configured as a software switch. <br \/>\r<br>What IP address must be configured in the workstation as the default gateway?<\/div><input type='hidden' name='question_id[]' id='qID_85' value='11848' \/><input type='hidden' id='answerType11848' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11848[]' id='answer-id-48875' class='answer   answerof-11848 ' value='48875'   \/><label for='answer-id-48875' id='answer-label-48875' class=' answer'><span>The port2\u2019s IP address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11848[]' id='answer-id-48876' class='answer   answerof-11848 ' value='48876'   \/><label for='answer-id-48876' id='answer-label-48876' class=' answer'><span>The router\u2019s IP address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11848[]' id='answer-id-48877' class='answer   answerof-11848 ' value='48877'   \/><label for='answer-id-48877' id='answer-label-48877' class=' answer'><span>The FortiGate\u2019s management IP address.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11848[]' id='answer-id-48878' class='answer   answerof-11848 ' value='48878'   \/><label for='answer-id-48878' id='answer-label-48878' class=' answer'><span>The software switch interface\u2019s IP address.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-86' style=';'><div id='questionWrap-86'  class='   watupro-question-id-11849'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>86. <\/span>Which of the following statements about the FSSO collector agent timers is true?<\/div><input type='hidden' name='question_id[]' id='qID_86' value='11849' \/><input type='hidden' id='answerType11849' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11849[]' id='answer-id-48879' class='answer   answerof-11849 ' value='48879'   \/><label for='answer-id-48879' id='answer-label-48879' class=' answer'><span>The dead entry timeout interval is used to age out entries with an unverified status.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11849[]' id='answer-id-48880' class='answer   answerof-11849 ' value='48880'   \/><label for='answer-id-48880' id='answer-label-48880' class=' answer'><span>The workstation verify interval is used to periodically check if a workstation is still a domain member.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11849[]' id='answer-id-48881' class='answer   answerof-11849 ' value='48881'   \/><label for='answer-id-48881' id='answer-label-48881' class=' answer'><span>The user group cache expiry is used to age out the monitored groups.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11849[]' id='answer-id-48882' class='answer   answerof-11849 ' value='48882'   \/><label for='answer-id-48882' id='answer-label-48882' class=' answer'><span>The IP address change verify interval monitors the server IP address where the collector agent is installed, and updates the collector agent configuration if it changes.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-87' style=';'><div id='questionWrap-87'  class='   watupro-question-id-11850'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>87. <\/span>An administrator has enabled the DHCP Server on the port1 interface and configured the following based on the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=649 height=161 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image074.jpg\" v:shapes=\"_x0000_i1061\"><br><br \/>\r<br>Which statement is correct based on this configuration?<\/div><input type='hidden' name='question_id[]' id='qID_87' value='11850' \/><input type='hidden' id='answerType11850' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11850[]' id='answer-id-48883' class='answer   answerof-11850 ' value='48883'   \/><label for='answer-id-48883' id='answer-label-48883' class=' answer'><span>The MAC address 00:0c:29:29:38:da belongs to the port1 interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11850[]' id='answer-id-48884' class='answer   answerof-11850 ' value='48884'   \/><label for='answer-id-48884' id='answer-label-48884' class=' answer'><span>Access to the network is blocked for the devices with the MAC address 00:0c:29:29:38:da and the IP address 10.0.1.254.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11850[]' id='answer-id-48885' class='answer   answerof-11850 ' value='48885'   \/><label for='answer-id-48885' id='answer-label-48885' class=' answer'><span>00:0c:29:29:38:da is the virtual MAC address assigned to the secondary IP address (10.0.1.254) of the port1 interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11850[]' id='answer-id-48886' class='answer   answerof-11850 ' value='48886'   \/><label for='answer-id-48886' id='answer-label-48886' class=' answer'><span>The IP address 10.0.1.254 is reserves for the device with the MAC address 00:0c:29:29:38:da.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-88' style=';'><div id='questionWrap-88'  class='   watupro-question-id-11851'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>88. <\/span>An administrator wants to create a policy-based IPsec VPN tunnel between two FortiGate devices. <br \/>\r<br>Which configuration steps must be performed on both units to support this scenario? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_88' value='11851' \/><input type='hidden' id='answerType11851' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11851[]' id='answer-id-48887' class='answer   answerof-11851 ' value='48887'   \/><label for='answer-id-48887' id='answer-label-48887' class=' answer'><span>Define the phase 2 parameters.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11851[]' id='answer-id-48888' class='answer   answerof-11851 ' value='48888'   \/><label for='answer-id-48888' id='answer-label-48888' class=' answer'><span>Set the phase 2 encapsulation method to transport mode.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11851[]' id='answer-id-48889' class='answer   answerof-11851 ' value='48889'   \/><label for='answer-id-48889' id='answer-label-48889' class=' answer'><span>Define at least one firewall policy, with the action set to IPsec.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11851[]' id='answer-id-48890' class='answer   answerof-11851 ' value='48890'   \/><label for='answer-id-48890' id='answer-label-48890' class=' answer'><span>Define a route to the remote network over the IPsec tunnel.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11851[]' id='answer-id-48891' class='answer   answerof-11851 ' value='48891'   \/><label for='answer-id-48891' id='answer-label-48891' class=' answer'><span>Define the phase 1 parameters, without enabling IPsec interface mode.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-89' style=';'><div id='questionWrap-89'  class='   watupro-question-id-11852'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>89. <\/span>View the Exhibit. <br \/>\r<br><br><img decoding=\"async\" width=581 height=424 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image076.jpg\" v:shapes=\"_x0000_i1062\"><br><br \/>\r<br>Which statements are correct based on this output? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_89' value='11852' \/><input type='hidden' id='answerType11852' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11852[]' id='answer-id-48892' class='answer   answerof-11852 ' value='48892'   \/><label for='answer-id-48892' id='answer-label-48892' class=' answer'><span>The global configuration is synchronized between the primary and secondary FortiGate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11852[]' id='answer-id-48893' class='answer   answerof-11852 ' value='48893'   \/><label for='answer-id-48893' id='answer-label-48893' class=' answer'><span>The all VDOM is not synchronized between the primary and secondary FortiGate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11852[]' id='answer-id-48894' class='answer   answerof-11852 ' value='48894'   \/><label for='answer-id-48894' id='answer-label-48894' class=' answer'><span>The root VDOM is not synchronized between the primary and secondary FortiGate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11852[]' id='answer-id-48895' class='answer   answerof-11852 ' value='48895'   \/><label for='answer-id-48895' id='answer-label-48895' class=' answer'><span>The FortiGates have three VDOMs.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-90' style=';'><div id='questionWrap-90'  class='   watupro-question-id-11853'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>90. <\/span>Which of the following statements about web caching are true? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_90' value='11853' \/><input type='hidden' id='answerType11853' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11853[]' id='answer-id-48896' class='answer   answerof-11853 ' value='48896'   \/><label for='answer-id-48896' id='answer-label-48896' class=' answer'><span>Web caching slows down web browsing due to constant read-write cycles from FortiGate memory.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11853[]' id='answer-id-48897' class='answer   answerof-11853 ' value='48897'   \/><label for='answer-id-48897' id='answer-label-48897' class=' answer'><span>When a client makes a web request, the proxy checks if the requested URL is already in memory.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11853[]' id='answer-id-48898' class='answer   answerof-11853 ' value='48898'   \/><label for='answer-id-48898' id='answer-label-48898' class=' answer'><span>Only heavy content is cached, for example, videos, images, audio and so on.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11853[]' id='answer-id-48899' class='answer   answerof-11853 ' value='48899'   \/><label for='answer-id-48899' id='answer-label-48899' class=' answer'><span>Web caching is supported in both explicit and implicit proxy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-91' style=';'><div id='questionWrap-91'  class='   watupro-question-id-11854'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>91. <\/span>What FortiGate configuration is required to actively prompt users for credentials?<\/div><input type='hidden' name='question_id[]' id='qID_91' value='11854' \/><input type='hidden' id='answerType11854' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11854[]' id='answer-id-48900' class='answer   answerof-11854 ' value='48900'   \/><label for='answer-id-48900' id='answer-label-48900' class=' answer'><span>You must enable one or more protocols that support active authentication on a firewall policy.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11854[]' id='answer-id-48901' class='answer   answerof-11854 ' value='48901'   \/><label for='answer-id-48901' id='answer-label-48901' class=' answer'><span>You must assign users to a group for active authentication.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11854[]' id='answer-id-48902' class='answer   answerof-11854 ' value='48902'   \/><label for='answer-id-48902' id='answer-label-48902' class=' answer'><span>You must place the firewall policy for active authentication before a firewall policy for passive authentication.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11854[]' id='answer-id-48903' class='answer   answerof-11854 ' value='48903'   \/><label for='answer-id-48903' id='answer-label-48903' class=' answer'><span>You must enable the Authentication setting on the firewall policy.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-92' style=';'><div id='questionWrap-92'  class='   watupro-question-id-11855'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>92. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=418 height=185 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image078.jpg\" v:shapes=\"_x0000_i1063\"><br><br \/>\r<br>In this scenario, FGT1 has the following routing table: <br \/>\r<br>S* 0. 0. 0. 0\/0 [10\/0] via 10. 40. 72. 2, port1 <br \/>\r<br>C 172. 16. 32. 0\/24 is directly connected, port2 <br \/>\r<br>C 10. 40. 72. 0\/30 is directly connected, port1 <br \/>\r<br>A user at 192.168.32.15 is trying to access the web server at 172.16.32.254. <br \/>\r<br>Which of the following statements best describe how the FortiGate will perform reverse path forwarding checks on this traffic? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_92' value='11855' \/><input type='hidden' id='answerType11855' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11855[]' id='answer-id-48904' class='answer   answerof-11855 ' value='48904'   \/><label for='answer-id-48904' id='answer-label-48904' class=' answer'><span>Strict RPF check will deny the traffic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11855[]' id='answer-id-48905' class='answer   answerof-11855 ' value='48905'   \/><label for='answer-id-48905' id='answer-label-48905' class=' answer'><span>Strict RPF check will allow the traffic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11855[]' id='answer-id-48906' class='answer   answerof-11855 ' value='48906'   \/><label for='answer-id-48906' id='answer-label-48906' class=' answer'><span>Loose RPF check will allow the traffic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11855[]' id='answer-id-48907' class='answer   answerof-11855 ' value='48907'   \/><label for='answer-id-48907' id='answer-label-48907' class=' answer'><span>Loose RPF check will deny the traffic.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-93' style=';'><div id='questionWrap-93'  class='   watupro-question-id-11856'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>93. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=650 height=115 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image080.jpg\" v:shapes=\"_x0000_i1064\"><br><br \/>\r<br>What does the log message indicate? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_93' value='11856' \/><input type='hidden' id='answerType11856' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11856[]' id='answer-id-48908' class='answer   answerof-11856 ' value='48908'   \/><label for='answer-id-48908' id='answer-label-48908' class=' answer'><span>The log type is utm.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11856[]' id='answer-id-48909' class='answer   answerof-11856 ' value='48909'   \/><label for='answer-id-48909' id='answer-label-48909' class=' answer'><span>10.0.1.10is the IP address for mind-surf.net.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11856[]' id='answer-id-48910' class='answer   answerof-11856 ' value='48910'   \/><label for='answer-id-48910' id='answer-label-48910' class=' answer'><span>FortiGate blocked the traffic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11856[]' id='answer-id-48911' class='answer   answerof-11856 ' value='48911'   \/><label for='answer-id-48911' id='answer-label-48911' class=' answer'><span>Firewall policy ID 6 matched the traffic.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-94' style=';'><div id='questionWrap-94'  class='   watupro-question-id-11857'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>94. <\/span>Which election criterion is used to elect the primary FortiGate in a high availability (HA) cluster when override is enabled?<\/div><input type='hidden' name='question_id[]' id='qID_94' value='11857' \/><input type='hidden' id='answerType11857' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11857[]' id='answer-id-48912' class='answer   answerof-11857 ' value='48912'   \/><label for='answer-id-48912' id='answer-label-48912' class=' answer'><span>uptime &gt; priority &gt; port monitor &gt; serial number<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11857[]' id='answer-id-48913' class='answer   answerof-11857 ' value='48913'   \/><label for='answer-id-48913' id='answer-label-48913' class=' answer'><span>port monitor &gt; uptime &gt; priority &gt;serial number<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11857[]' id='answer-id-48914' class='answer   answerof-11857 ' value='48914'   \/><label for='answer-id-48914' id='answer-label-48914' class=' answer'><span>priority &gt; port monitor &gt;uptime &gt;serial number<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11857[]' id='answer-id-48915' class='answer   answerof-11857 ' value='48915'   \/><label for='answer-id-48915' id='answer-label-48915' class=' answer'><span>port monitor &gt; priority &gt; uptime &gt;serial number<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-95' style=';'><div id='questionWrap-95'  class='   watupro-question-id-11858'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>95. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=624 height=221 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image082.jpg\" v:shapes=\"_x0000_i1065\"><br><br \/>\r<br>What does this exhibit represent?<\/div><input type='hidden' name='question_id[]' id='qID_95' value='11858' \/><input type='hidden' id='answerType11858' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11858[]' id='answer-id-48916' class='answer   answerof-11858 ' value='48916'   \/><label for='answer-id-48916' id='answer-label-48916' class=' answer'><span>SSL handshake<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11858[]' id='answer-id-48917' class='answer   answerof-11858 ' value='48917'   \/><label for='answer-id-48917' id='answer-label-48917' class=' answer'><span>Interchanging digital certificates<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11858[]' id='answer-id-48918' class='answer   answerof-11858 ' value='48918'   \/><label for='answer-id-48918' id='answer-label-48918' class=' answer'><span>Certificate signing request (CSR)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11858[]' id='answer-id-48919' class='answer   answerof-11858 ' value='48919'   \/><label for='answer-id-48919' id='answer-label-48919' class=' answer'><span>Inline SSL inspection<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-96' style=';'><div id='questionWrap-96'  class='   watupro-question-id-11859'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>96. <\/span>Which condition must be met to offload the encryption and decryption of IPsec traffic to an NP6 processor?<\/div><input type='hidden' name='question_id[]' id='qID_96' value='11859' \/><input type='hidden' id='answerType11859' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11859[]' id='answer-id-48920' class='answer   answerof-11859 ' value='48920'   \/><label for='answer-id-48920' id='answer-label-48920' class=' answer'><span>Phase 2 must use an encryption algorithm supported by the NP6.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11859[]' id='answer-id-48921' class='answer   answerof-11859 ' value='48921'   \/><label for='answer-id-48921' id='answer-label-48921' class=' answer'><span>Anti-replay must be disabled.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11859[]' id='answer-id-48922' class='answer   answerof-11859 ' value='48922'   \/><label for='answer-id-48922' id='answer-label-48922' class=' answer'><span>IPsec traffic must not be inspected by a session helper.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11859[]' id='answer-id-48923' class='answer   answerof-11859 ' value='48923'   \/><label for='answer-id-48923' id='answer-label-48923' class=' answer'><span>No content inspection can be applied to traffic that is going to be encrypted.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-97' style=';'><div id='questionWrap-97'  class='   watupro-question-id-11860'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>97. <\/span>What FortiGate feature can be used to prevent a cross-site scripting (XSS) attack?<\/div><input type='hidden' name='question_id[]' id='qID_97' value='11860' \/><input type='hidden' id='answerType11860' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11860[]' id='answer-id-48924' class='answer   answerof-11860 ' value='48924'   \/><label for='answer-id-48924' id='answer-label-48924' class=' answer'><span>Web application firewall (WAF)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11860[]' id='answer-id-48925' class='answer   answerof-11860 ' value='48925'   \/><label for='answer-id-48925' id='answer-label-48925' class=' answer'><span>DoS policies<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11860[]' id='answer-id-48926' class='answer   answerof-11860 ' value='48926'   \/><label for='answer-id-48926' id='answer-label-48926' class=' answer'><span>Rate based IPS signatures<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11860[]' id='answer-id-48927' class='answer   answerof-11860 ' value='48927'   \/><label for='answer-id-48927' id='answer-label-48927' class=' answer'><span>One-arm sniffer<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-98' style=';'><div id='questionWrap-98'  class='   watupro-question-id-11861'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>98. <\/span>What is the purpose of the Policy Lookup feature?<\/div><input type='hidden' name='question_id[]' id='qID_98' value='11861' \/><input type='hidden' id='answerType11861' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11861[]' id='answer-id-48928' class='answer   answerof-11861 ' value='48928'   \/><label for='answer-id-48928' id='answer-label-48928' class=' answer'><span>It searches the matching policy based on an input criteria.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11861[]' id='answer-id-48929' class='answer   answerof-11861 ' value='48929'   \/><label for='answer-id-48929' id='answer-label-48929' class=' answer'><span>It enables hidden security profiles with full logging capabilities and generates Learning Reports based on an input criteria.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11861[]' id='answer-id-48930' class='answer   answerof-11861 ' value='48930'   \/><label for='answer-id-48930' id='answer-label-48930' class=' answer'><span>It finds duplicate objects in firewall policies.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11861[]' id='answer-id-48931' class='answer   answerof-11861 ' value='48931'   \/><label for='answer-id-48931' id='answer-label-48931' class=' answer'><span>It creates a new firewall policy based on an input criteria.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-99' style=';'><div id='questionWrap-99'  class='   watupro-question-id-11862'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>99. <\/span>View the exhibit. <br \/>\r<br><br><img decoding=\"async\" width=624 height=375 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image084.jpg\" v:shapes=\"_x0000_i1066\"><br><br \/>\r<br>Which of the following statements are correct? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_99' value='11862' \/><input type='hidden' id='answerType11862' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11862[]' id='answer-id-48932' class='answer   answerof-11862 ' value='48932'   \/><label for='answer-id-48932' id='answer-label-48932' class=' answer'><span>next-hop IP address is not required when configuring a static route that uses the wan-load balance interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11862[]' id='answer-id-48933' class='answer   answerof-11862 ' value='48933'   \/><label for='answer-id-48933' id='answer-label-48933' class=' answer'><span>Sessions will be load-balanced based on source and destination IP addresses.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11862[]' id='answer-id-48934' class='answer   answerof-11862 ' value='48934'   \/><label for='answer-id-48934' id='answer-label-48934' class=' answer'><span>Each member interface requires its own firewall policy to allow traffic.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-11862[]' id='answer-id-48935' class='answer   answerof-11862 ' value='48935'   \/><label for='answer-id-48935' id='answer-label-48935' class=' answer'><span>The wan-load-balance interface must be manually created.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-100' style=';'><div id='questionWrap-100'  class='   watupro-question-id-11863'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>100. <\/span>Examine the following web filtering log. <br \/>\r<br><br><img decoding=\"async\" width=650 height=98 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2018\/exams\/NSE4-5.files\/image086.jpg\" v:shapes=\"_x0000_i1067\"><br><br \/>\r<br>Which statement about the log message is true?<\/div><input type='hidden' name='question_id[]' id='qID_100' value='11863' \/><input type='hidden' id='answerType11863' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11863[]' id='answer-id-48936' class='answer   answerof-11863 ' value='48936'   \/><label for='answer-id-48936' id='answer-label-48936' class=' answer'><span>The action for the category Games is set to block.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11863[]' id='answer-id-48937' class='answer   answerof-11863 ' value='48937'   \/><label for='answer-id-48937' id='answer-label-48937' class=' answer'><span>The usage quota for the IP address 10.0.1.10 has expired.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11863[]' id='answer-id-48938' class='answer   answerof-11863 ' value='48938'   \/><label for='answer-id-48938' id='answer-label-48938' class=' answer'><span>The name of the applied web filter profile is default.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-11863[]' id='answer-id-48939' class='answer   answerof-11863 ' value='48939'   \/><label for='answer-id-48939' id='answer-label-48939' class=' answer'><span>The web site miniclip.com matches a static URL filter whose action is set to Warning.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div style='display:none' id='question-101'>\n\t<div class='question-content'>\n\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\" alt=\"Loading...\" title=\"Loading...\" \/>&nbsp;Loading...\t<\/div>\n<\/div>\n\n<br \/>\n\t\n\t\t\t<div class=\"watupro_buttons flex \" id=\"watuPROButtons546\" >\n\t\t  <div id=\"prev-question\" style=\"display:none;\"><input type=\"button\" value=\"&lt; Previous\" onclick=\"WatuPRO.nextQuestion(event, 'previous');\"\/><\/div>\t\t  \t\t  \t\t   \n\t\t   \t  \t\t<div><input type=\"button\" name=\"action\" class=\"watupro-submit-button\" onclick=\"WatuPRO.submitResult(event)\" id=\"action-button\" value=\"View Results\"  \/>\n\t\t<\/div>\n\t\t<\/div>\n\t\t\n\t<input type=\"hidden\" name=\"quiz_id\" value=\"546\" id=\"watuPROExamID\"\/>\n\t<input type=\"hidden\" name=\"start_time\" id=\"startTime\" value=\"2026-05-01 00:34:50\" \/>\n\t<input type=\"hidden\" name=\"start_timestamp\" id=\"startTimeStamp\" value=\"1777595690\" \/>\n\t<input type=\"hidden\" name=\"question_ids\" value=\"\" \/>\n\t<input type=\"hidden\" name=\"watupro_questions\" value=\"11764:48532,48533,48534,48535 | 11765:48536,48537,48538,48539 | 11766:48540,48541,48542,48543 | 11767:48544,48545,48546,48547,48548 | 11768:48549,48550,48551,48552 | 11769:48553,48554,48555,48556 | 11770:48557,48558,48559,48560 | 11771:48561,48562,48563,48564 | 11772:48565,48566,48567,48568 | 11773:48569,48570,48571,48572,48573 | 11774:48574,48575,48576,48577 | 11775:48578,48579,48580,48581 | 11776:48582,48583,48584,48585 | 11777:48586,48587,48588,48589,48590 | 11778:48591,48592,48593,48594 | 11779:48595,48596,48597,48598,48599 | 11780:48600,48601,48602,48603 | 11781:48604,48605,48606,48607 | 11782:48608,48609,48610,48611 | 11783:48612,48613,48614,48615 | 11784:48616,48617,48618,48619 | 11785:48620,48621,48622,48623 | 11786:48624,48625,48626,48627 | 11787:48628,48629,48630,48631 | 11788:48632,48633,48634,48635 | 11789:48636,48637,48638,48639 | 11790:48640,48641,48642,48643,48644 | 11791:48645,48646,48647,48648 | 11792:48649,48650,48651,48652 | 11793:48653,48654,48655,48656 | 11794:48657,48658,48659,48660 | 11795:48661,48662,48663,48664 | 11796:48665,48666,48667,48668 | 11797:48669,48670,48671,48672 | 11798:48673,48674,48675,48676 | 11799:48677,48678,48679,48680 | 11800:48681,48682,48683,48684 | 11801:48685,48686,48687,48688,48689 | 11802:48690,48691,48692,48693 | 11803:48694,48695,48696,48697 | 11804:48698,48699,48700,48701 | 11805:48702,48703,48704,48705 | 11806:48706,48707,48708,48709 | 11807:48710,48711,48712,48713 | 11808:48714,48715,48716,48717 | 11809:48718,48719,48720,48721 | 11810:48722,48723,48724,48725 | 11811:48726,48727,48728,48729 | 11812:48730,48731,48732,48733 | 11813:48734,48735,48736,48737 | 11814:48738,48739,48740,48741 | 11815:48742,48743,48744,48745 | 11816:48746,48747,48748,48749 | 11817:48750,48751,48752,48753 | 11818:48754,48755,48756,48757 | 11819:48758,48759,48760,48761 | 11820:48762,48763,48764,48765 | 11821:48766,48767,48768,48769 | 11822:48770,48771,48772,48773 | 11823:48774,48775,48776,48777 | 11824:48778,48779,48780,48781 | 11825:48782,48783,48784,48785 | 11826:48786,48787,48788,48789 | 11827:48790,48791,48792,48793 | 11828:48794,48795,48796,48797 | 11829:48798,48799,48800,48801 | 11830:48802,48803,48804,48805 | 11831:48806,48807,48808,48809 | 11832:48810,48811,48812,48813 | 11833:48814,48815,48816,48817 | 11834:48818,48819,48820,48821 | 11835:48822,48823,48824,48825 | 11836:48826,48827,48828,48829 | 11837:48830,48831,48832,48833 | 11838:48834,48835,48836,48837 | 11839:48838,48839,48840,48841 | 11840:48842,48843,48844,48845 | 11841:48846,48847,48848,48849 | 11842:48850,48851,48852,48853 | 11843:48854,48855,48856,48857 | 11844:48858,48859,48860,48861 | 11845:48862,48863,48864,48865 | 11846:48866,48867,48868,48869 | 11847:48870,48871,48872,48873,48874 | 11848:48875,48876,48877,48878 | 11849:48879,48880,48881,48882 | 11850:48883,48884,48885,48886 | 11851:48887,48888,48889,48890,48891 | 11852:48892,48893,48894,48895 | 11853:48896,48897,48898,48899 | 11854:48900,48901,48902,48903 | 11855:48904,48905,48906,48907 | 11856:48908,48909,48910,48911 | 11857:48912,48913,48914,48915 | 11858:48916,48917,48918,48919 | 11859:48920,48921,48922,48923 | 11860:48924,48925,48926,48927 | 11861:48928,48929,48930,48931 | 11862:48932,48933,48934,48935 | 11863:48936,48937,48938,48939\" \/>\n\t<input type=\"hidden\" name=\"no_ajax\" value=\"0\">\t\t\t<\/form>\n\t<p>&nbsp;<\/p>\n<\/div>\n\n<script type=\"text\/javascript\">\n\/\/jQuery(document).ready(function(){\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \t\nvar question_ids = \"11764,11765,11766,11767,11768,11769,11770,11771,11772,11773,11774,11775,11776,11777,11778,11779,11780,11781,11782,11783,11784,11785,11786,11787,11788,11789,11790,11791,11792,11793,11794,11795,11796,11797,11798,11799,11800,11801,11802,11803,11804,11805,11806,11807,11808,11809,11810,11811,11812,11813,11814,11815,11816,11817,11818,11819,11820,11821,11822,11823,11824,11825,11826,11827,11828,11829,11830,11831,11832,11833,11834,11835,11836,11837,11838,11839,11840,11841,11842,11843,11844,11845,11846,11847,11848,11849,11850,11851,11852,11853,11854,11855,11856,11857,11858,11859,11860,11861,11862,11863\";\nWatuPROSettings[546] = {};\nWatuPRO.qArr = question_ids.split(',');\nWatuPRO.exam_id = 546;\t    \nWatuPRO.post_id = 1288;\nWatuPRO.store_progress = 0;\nWatuPRO.curCatPage = 1;\nWatuPRO.requiredIDs=\"0\".split(\",\");\nWatuPRO.hAppID = \"0.64515200 1777595690\";\nvar url = \"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/show_exam.php\";\nWatuPRO.examMode = 1;\nWatuPRO.siteURL=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-admin\/admin-ajax.php\";\nWatuPRO.emailIsNotRequired = 0;\nWatuPROIntel.init(546);\nWatuPRO.inCategoryPages=1;});    \t \n<\/script>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Fortinet FortiOS 5.4 NSE4-5.4 exam, as a hot exam for NSE4 exam, recognizes your ability to install and manage the day-to-day configuration, monitoring, and operation of a FortiGate device to support specific corporate network security policies. However, passing NSE4-5.4 exam is not an easy task, Dumpsbase Real Fortinet FortiOS 5.4 NSE4-5.4 Exam Questions will be [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[189,632],"tags":[3436,3443,3444,3439,3437,3441,3442,3438,3440,3435],"class_list":["post-1288","post","type-post","status-publish","format-standard","hentry","category-fortinet","category-nse4","tag-fortinet-fortios-5-4-nse4-5-4-exam","tag-nse4-5-4-dumps","tag-nse4-5-4-dumps-questions","tag-nse4-5-4-exam-guide","tag-nse4-5-4-exam-questions","tag-nse4-5-4-free-questions","tag-nse4-5-4-online-questions","tag-nse4-5-4-real-questions","tag-nse4-5-4-training-online","tag-real-fortinet-fortios-5-4-nse4-5-4-exam-questions"],"_links":{"self":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/1288","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/comments?post=1288"}],"version-history":[{"count":1,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/1288\/revisions"}],"predecessor-version":[{"id":1289,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/1288\/revisions\/1289"}],"wp:attachment":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/media?parent=1288"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/categories?post=1288"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/tags?post=1288"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}