Fortinet Network Security Expert 4 Written (400) Set 2

1.

In transparent mode, forward-domain is an CLI setting associate with ___________.

static route a firewall policy an interface a virtual domain

2.

Which of the following sequences describes the correct order of criteria used for the selection of a master unit within a FortiGate high availability (HA) cluster when override is disabled?

1. port monitor, 2. unit priority, 3. up time, 4. serial number. 1. port monitor, 2. up time, 3. unit priority, 4. serial number. 1. unit priority, 2. up time, 3. port monitor, 4. serial number. 1. up time, 2. unit priority, 3. port monitor, 4. serial number.

3.

Which statement is an advantage of using a hub and spoke IPsec VPN configuration instead of a fully-meshed set of IPsec tunnels?

Using a hub and spoke topology provides full redundancy. Using a hub and spoke topology requires fewer tunnels. Using a hub and spoke topology uses stronger encryption protocols. Using a hub and spoke topology requires more routes.

4.

Identify the statement which correctly describes the output of the following command: diagnose ips anomaly list

Lists the configured DoS policy. List the real-time counters for the configured DoS policy. Lists the errors captured when compiling the DoS policy. Lists the IPS signature matches.

5.

Which statement is one disadvantage of using FSSO NetAPI polling mode over FSSO Security Event Log (WinSecLog) polling mode?

It requires a DC agent installed in some of the Windows DC. It runs slower. It might miss some logon events. It requires access to a DNS server for workstation name resolution.

6.

Which statement describes what the CLI command diagnose debug authd fsso list is used for

Monitors communications between the FSSO collector agent and FortiGate unit. Displays which users are currently logged on using FSSO. Displays a listing of all connected FSSO collector agents. Lists all DC Agents installed on all domain controllers.

7.

When the SSL proxy is NOT doing man-in-the-middle interception of SSL traffic, which certificate field can be used to determine the rating of a website?

Organizational Unit. Common Name. Serial Number. Validity.

8.

Bob wants to send Alice a file that is encrypted using public key cryptography. Which of the following statements is correct regarding the use of public key cryptography in this scenario?

Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file. Bob will use his public key to encrypt the file and Alice will use Bob's private key to decrypt the file Bob will use Alice's public key to encrypt the file and Alice will use her private key to decrypt the file. Bob will use his public key to encrypt the file and Alice will use her private key to decrypt the file.

9.

For data leak prevention, which statement describes the difference between the block and quarantine actions?

A block action prevents the transaction. A quarantine action blocks all future transactions, regardless of the protocol. A block action prevents the transaction.A quarantine action archives the data. A block action has a finite duration.A quarantine action must be removed by an administrator. A block action is used for known users.A quarantine action is used for unknown users.

10.

Which is one of the conditions that must be met for offloading the encryption and decryption of IPsec traffic to an NP6 processor?

No protection profile can be applied over the IPsec traffic. Phase-2 anti-replay must be disabled. Both the phase 1 and phases 2 must use encryption algorithms supported by the NP6. IPsec traffic must not be inspected by any FortiGate session helper.

Fortinet Network Security Expert 4 Written (400) Set 2

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Network Security Expert 4 Written (400) Set 2

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner