NSE4無料問題集「Fortinet Network Security Expert 4 Written Exam (400)」

質問 1

Which header field can be used in a firewall policy for traffic matching?

（A）TCP window size.

（B）ICMP type and code.

（C）TCP sequence number.

（D）DSCP.

正解：B 解答を投票する

質問 2

Examine the exhibit; then answer the question below.

Which statement describes the green status indicators that appear next to the different
FortiGuard Distribution Network services as illustrated in the exhibit?

（A）They indicate that the FortiGate is in the process of downloading updates from the
FortiGuard Distribution Network.

（B）They indicate that the FortiGate is able to connect to the FortiGuard Distribution
Network.

（C）They indicate that the FortiGate has the latest updates available from the FortiGuard
Distribution Network.

（D）They indicate that updates are available and should be downloaded from the FortiGuard
Distribution Network to the FortiGate unit.

正解：B 解答を投票する

質問 3

Which statement is one disadvantage of using FSSO NetAPI polling mode over FSSO
Security Event Log (WinSecLog) polling mode?

（A）It requires access to a DNS server for workstation name resolution.

（B）It requires a DC agent installed in some of the Windows DC.

（C）It runs slower.

（D）It might miss some logon events.

正解：D 解答を投票する

質問 4

Which of the following statements are correct regarding SSL VPN Web-only mode?
(Choose two.)

（A）IP traffic is encapsulated over HTTPS.

（B）It is not possible to connect to SSH servers through the VPN.

（C）It can only be used to connect to web services.

（D）Access to internal network resources is possible from the SSL VPN portal.

（E）The standalone FortiClient SSL VPN client CANNOT be used to establish a Web-only
SSL VPN.

正解：A、D 解答を投票する

質問 5

The exhibit shoes three static routes.

Which routes will be used to route the packets to the destination IP address 172.20.168.1?

（A）Only the route with the ID number 2.

（B）Only the route with the ID number 1.

（C）The route with the ID number 2 and 3.

（D）Only the route with the ID number 3.

正解：B 解答を投票する

質問 6

An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has enabled split tunneling.

Given that the user authenticates against the SSL VPN policy shown in the image below, which statement below identifies the route that is added to the client's routing table.

（A）A default route.

（B）A route to the destination matching the `all' address object.

（C）A route to destination matching the `WIN2K3' address object.

（D）No route is added.

正解：C 解答を投票する

質問 7

Regarding tunnel-mode SSL VPN, which three statements are correct? (Choose three.)

（A）An SSL VPN IP address is dynamically assigned to the client by the FortiGate unit.

（B）Split tunneling is supported.

（C）It requires the use of an Internet browser.

（D）It requires the installation of a VPN client.

（E）It does not support traffic from third-party network applications.

正解：A、B、D 解答を投票する

質問 8

Which of the following statement correct describes the use of the "diagnose sys ha reset- uptime" command?

（A）To restart a FortiGate unit that is part of an HA cluster.

（B）To force an HA failover when the HA override setting is disabled.

（C）To clear the HA counters.

（D）To force an HA failover when the HA override setting is enabled.

正解：B 解答を投票する

質問 9

Which are the three different types of Conserve Mode that can occur on a FortiGate device? (Choose three.)

（A）Operating system

（B）Device

（C）Kernel

（D）System

（E）Proxy

正解：C、D、E 解答を投票する

質問 10

Which user group types does FortiGate support for firewall authentication? (Choose three.)

（A）NTLM

（B）Firewall

（C）RSSO

（D）FSSO

（E）LDAP

正解：B、C、D 解答を投票する

NSE4 無料問題集「Fortinet Network Security Expert 4 Written Exam (400)」

弊社を連絡する

関連リンク

トップ試験