Fortinet Network Security Expert 4 Written (400) Set 3

Question - 15 Maximum mark : - 28

Home
All Exams
Fortinet Network Security Expert 4 Written (400) Online Practice Exams
Fortinet Network Security Expert 4 Written (400) Set 3

WAN optimization is configured in Active/Passive mode. When will the remote peer accept an attempt to initiate a tunnel?

The attempt will be accepted when the request comes from a known peer and there is a matching WAN optimization passive rule. ✘ The attempt will be accepted when there is a matching WAN optimization passive rule. ✘ The attempt will be accepted when the request comes from a known peer. ✘ The attempt will be accepted when a user on the remote peer accepts the connection request. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

SSL Proxy is used to decrypt the SSL-encrypted traffic. After decryption, where is the traffic buffered in preparation for content inspection?

The file is buffered by the application proxy. ✘ The file is buffered by the SSL proxy. ✘ In the upload direction, the file is buffered by the SSL proxy.In the download direction, the file is buffered by the application proxy. ✘ No file buffering is needed since a stream-based scanning approach is used for SSL content inspection. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

An administrator logs into a FortiGate unit using an account which has been assigned a super_admin profile. Which of the following operations can this administrator perform?

They can delete logged-in users who are also assigned the super_admin access profile. ✘ They can make changes to the super_admin profile. ✘ They can delete the admin account if the default admin user is not logged in. ✘ They can view all the system configuration settings but can not make changes. ✔ They can access configuration options for only the VDOMs to which they have been assigned. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following statements is correct about how the FortiGate unit verifies username and password during user authentication?

If a remote server is included in a user group, it will be checked before local accounts. ✘ An administrator can define a local account for which the password must be verified by querying a remote server. ✘ If authentication fails with a local password, the FortiGate unit will query the authentication server if the local user is configured with both a local password andan authentication server. ✘ The FortiGate unit will only attempt to authenticate against Active Directory if Fortinet Server Authentication Extensions are installed and configured. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

In the Tunnel Mode widget of the web portal, the administrator has configured an IP Pool and enabled split tunneling. Which of the following statements is true about the IP address used by the SSL VPN client?

The IP pool specified in the SSL-VPN Tunnel Mode Widget Options will override the IP address range defined in the SSL-VPN Settings. ✘ Because split tunneling is enabled, no IP address needs to be assigned for the SSL VPN tunnel to be established. ✘ The IP address range specified in SSL-VPN Settings will override the IP address range in the SSL-VPN Tunnel Mode Widget Options. ✘

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

The Host Check feature can be enabled on the FortiGate unit for SSL VPN connections. When this feature is enabled, the FortiGate unit probes the remote host computer to verify that it is safe before access is granted. Which of the following items is NOT an option as part of the Host Check feature?

FortiClient Antivirus software ✘ Microsoft Windows Firewall software ✘ FortiClient Firewall software ✘ Third-party Antivirus software ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following report templates must be used when scheduling report generation?

Layout Template ✘ Data Filter Template ✘ Output Template ✘ Chart Template ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following statements is not correct regarding virtual domains (VDOMs)?

VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units. ✘ A management VDOM handles SNMP, logging, alert email, and FDN-based updates. ✘ A backup management VDOM will synchronize the configuration from an active management VDOM. ✘ VDOMs share firmware versions, as well as antivirus and IPS databases. ✔ Only administrative users with a super_admin profile will be able to enter all VDOMs to make configuration changes. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

What advantages are there in using a fully Meshed IPSec VPN configuration instead of a hub and spoke set of IPSec tunnels?

Using a hub and spoke topology is required to achieve full redundancy. ✘ Using a full mesh topology simplifies configuration. ✘ Using a full mesh topology provides stronger encryption. ✘ Full mesh topology is the most fault-tolerant configuration. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

An administrator wishes to generate a report showing Top Traffic by service type, but wants to exclude SMTP traffic from the report. Which of the following statements best describes how to do this?

In the Service field of the Data Filter, type 25/smtp and select the NOT checkbox. ✘ Add the following entry to the Generic Field section of the Data Filter: service=!smtp. ✘ When editing the chart, uncheck mlog to indicate that Mail Filtering data is being excluded when generating the chart. ✘ When editing the chart, enter dns in the Exclude Service field. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Fortinet Network Security Expert 4 Written (400) Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner