NSE4 無料問題集「Fortinet Network Security Expert 4 Written Exam (400)」

（A）[confidential data]

（B）"confidential data"

（C）/confidential data/i

（D）i/confidential data/

（A）An FSSO collector agent must be installed on every domain controller.

（B）An FSSO domain controller agent must be installed on every domain controller.

（C）The FSSO collector agent will receive user logon information from the domain controller agent and will send it to the FortiGate unit.

（D）The FSSO domain controller agent will regularly update user logon information on the
FortiGate unit.

（A）Protection profiles can be applied to both individual users and user groups

（B）Protection profiles can be applied to user groups only.

（C）Nested or inherited groups are supported

（D）Usernames follow the LDAP convention: CN=User, OU=Name, DC=Domain

（E）Usernames follow the Windows convention: Domain\username

（A）A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access all Internet services.

（B）DNS Internet access is always allowed, even for users that have not authenticated.

（C）A user that has not authenticated can access the Internet using any protocol that does not trigger an authentication challenge.

（D）A user that has not authenticated can access the Internet using any protocol except
HTTP, HTTPS, Telnet, and FTP.

（A）Yes

（B）No

（C）Yes, but only if you replace the "#conf_file_ver" line so that it contains the serial number of that specific FortiWiFi 60D.

（D）Yes, but only if it is running the same version of FortiOS, or a newer compatible version.

（A）Monitor

（B）Block

（C）Allow

（D）Warning

（E）Authenticate

（A）MSCHAP2

（B）PAP

（C）FSSO

（D）CHAP

（A）Administrative users with a 'super_admin' profile can administrate only one VDOM.

（B）Each VDOM can run different firmware versions.

（C）A management VDOM handles SNMP. logging, alert email and FortiGuard updates.

（D）VDOMs divide a single FortiGate unit into two or more independent firewall.

（A）Enable monitoring of all active interfaces.

（B）Configure the HA ping server feature to allow for HA failover in the event that a path is disrupted.

（C）Increase the number of FortiGate units in the cluster and configure HA in active-active mode.

（D）Set up a full-mesh design which uses redundant interfaces.

（A）An Internal IP Range defines the IP addresses permitted to use the pool.

（B）An External IP Range defines the IP addresses in the pool.

（C）A Block Size defines the number of connections.

（D）Blocks Per User defines the number of connection blocks for each user.

（A）Forward-only.

（B）Iterative.

（C）Non-recursive.

（D）Conditional-forward.

（E）Recursive.

（A）As each VDOM has an independent routing table, routing rules need to be set (for example, static routing, OSPF) in each VDOM to route traffic between VDOMs.

（B）The administrator can configure inter-VDOM links to avoid using external interfaces and routers.

（C）Inter-VDOM routing is automatically provided if all the subnets that need to be routed are locally attached.

（D）As with all FortiGate unit interfaces, firewall policies must be in place for traffic to be allowed to pass through any interface, including inter-VDOM links.

（E）This configuration requires a router to be positioned between the FortiGate unit and the
Internet for proper routing.

（A）Global View lists firewall policies primarily by their interface pairs.

（B）Section View lists firewall policies primarily by their sequence number.

（C）The 'any' interface may be used with Section View.

（D）Section View lists firewall policies primarily by their interface pairs.

（E）Global View lists firewall policies primarily by their policy sequence number.