Fortinet Network Security Expert - FortiOS 5.4 Set 4

1.

Which of the following components are contained in all FortiGate units from the FG50 models and up? (Select all that apply.)

FortiASIC content processor. Hard Drive. Gigabit network interfaces. Serial console port.

2.

The command structure of the FortiGate CLI consists of commands, objects, branches, tables, and parameters. Which of the following items describes user?

A command An object A table A parameter.

3.

Because changing the operational mode to Transparent resets device (or vdom) to all defaults, which precautions should an Administrator take prior to performing this? (Select all that apply.)

Backup the configuration. Disconnect redundant cables to ensure the topology will not contain layer 2 loops. Set the unit to factory defaults. Update IPS and AV files.

4.

Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

The proxy will not allow a file to be transmitted in multiple streams simultaneously. The proxy sends the file to the server while simultaneously buffering it. If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.

5.

Which part of an email message exchange is NOT inspected by the POP3 and IMAP proxies?

TCP connection File attachments Message headers Message body

6.

The FortiGate Web Config provides a link to update the firmware in the System > Status window.Clicking this link will perform which of the following actions?

It will connect to the Fortinet support site where the appropriate firmware version can be selected. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit. It will present a prompt to allow browsing to the location of the firmware file. It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit.

7.

Which of the following statements are correct regarding virtual domains (VDOMs)? (Select all that apply.)

VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units. A management VDOM handles SNMP, logging, alert email, and FDN-based updates. VDOMs share firmware versions, as well as antivirus and IPS databases. Only administrative users with a 'super_admin' profile will be able to enter multiple VDOMs to make configuration changes.

8.

What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)

Enable session pick-up. Only applies to connections handled by a proxy. Only applies to UDP and ICMP connections. Connections must not be handled by a proxy.

9.

What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully- meshed set of IPSec tunnels? (Select all that apply.)

Using a hub and spoke topology is required to achieve full redundancy. Using a hub and spoke topology simplifies configuration because fewer tunnels are required. Using a hub and spoke topology provides stronger encryption. The routing at a spoke is simpler, compared to a meshed node.

10.

With FSSO, a domain user could authenticate either against the domain controller running the Collector Agent and Domain Controller Agent, or a domain controller running only the Domain Controller Agent. If you attempt to authenticate with the Secondary Domain Controller running only the Domain Controller Agent, which of the following statements are correct? (Select all that apply.)

The login event is sent to the Collector Agent. The FortiGate unit receives the user information from the Domain Controller Agent of the Secondary Controller. The Collector Agent performs the DNS lookup for the authenticated client's IP address. The user cannot be authenticated with the FortiGate device in this manner because each Domain Controller Agent requires a dedicated Collector Agent.

Fortinet Network Security Expert - FortiOS 5.4 Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Network Security Expert - FortiOS 5.4 Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner