Fortinet NSE4-5.4 Exam Questions

Question 6 of 569

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

The FortiGate unit's public IP address

The FortiGate unit's internal IP address

The remote user's virtual IP address

The remote user's public IP address

Correct Answer: B

Question 7 of 569

What is FortiGate's behavior when local disk logging is disabled?

Only real-time logs appear on the FortiGate dashboard.

No logs are generated.

Alert emails are disabled.

Remote logging is automatically enabled.

Correct Answer: A

Question 8 of 569

What traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

Traffic to inappropriate web sites

SQL injection attacks

Server information disclosure attacks

Credit card data leaks

Traffic to botnet command and control (C&C) servers

Correct Answer: B, C, E

Question 9 of 569

Which statements about One-to-One IP pool are true? (Choose two.)

It allows configuration of ARP replies.

It allows fixed mapping of an internal address range to an external address range.

It is used for destination NAT.

It does not use port address translation.

Correct Answer: B, D

Question 10 of 569

Which statements correctly describe transparent mode operation? (Choose three.)

All interfaces of the transparent mode FortiGate device must be on different IP subnets.

The transparent FortiGate is visible to network hosts in an IP traceroute.

It permits inline traffic inspection and firewalling without changing the IP scheme of the network.

Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.

The FortiGate acts as transparent bridge and forwards traffic at Layer-2.

Correct Answer: C, D, E