Act now and download your Fortinet NSE4-5.4 test today! Do not waste time for the worthless Fortinet NSE4-5.4 tutorials. Download Rebirth Fortinet Fortinet Network Security Expert - FortiOS 5.4 exam with real questions and answers and begin to learn Fortinet NSE4-5.4 with a classic professional.
P.S. Free NSE4-5.4 testing bible are available on Google Drive, GET MORE: https://drive.google.com/open?id=1qNqkyfzMtD_JBMTiOJF0Q0poKyl3pZ-7
Question No: 4
Which of the following statements about advanced AD access mode for FSSO collector agent are true? (Choose two.)
A. It is only supported if DC agents are deployed.
B. FortiGate can act as an LDAP client configure the group filters.
C. It supports monitoring of nested groups.
D. It uses the Windows convention for naming, that is, DomainUsername.
Answer: B,D
Question No: 5
A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups.
What is required in the SSL VPN configuration to meet these requirements?
A. Two separated SSL VPNs in different interfaces of the same VDOM
B. Different SSL VPN realms for each group
C. Different virtual SSLVPN IP addresses for each group
D. Two firewall policies with different captive portals
Answer: D
Question No: 6
Which file names will match the *.tiff file name pattern configured in a data leak prevention filter? (Choose two.)
A. tiff.tiff
B. tiff.png
C. tiff.jpeg
D. gif.tiff
Answer: A,D
Question No: 7
What inspections are executed by the IPS engine? (Choose three.)
A. Application control
B. Flow-based data leak prevention
C. Proxy-based antispam
D. Flow-based web filtering
E. Proxy-based antivirus
Answer: A,B,D
Question No: 8
Which traffic sessions can be offloaded to a NP6 processor? (Choose two.)
A. IPv6
B. RIP
C. GRE
D. NAT64
Answer: A,D
Question No: 9
Which of the following settings and protocols can be used to provide secure and restrictive administrative access to FortiGate? (Choose three.)
A. Trusted host
B. HTTPS
C. Trusted authentication
D. SSH
E. FortiTelemetry
Answer: A,B,D
Question No: 10
Which statements are correct based on this output? (Choose two.)
A. The global configuration is synchronized between the primary and secondary FortiGate.
B. The all VDOM is not synchronized between the primary and secondary FortiGate.
C. The root VDOM is not synchronized between the primary and secondary FortiGate.
D. The FortiGates have three VDOMs.
Answer: A,B
Question No: 11
How does FortiGate select the central SNAT policy that is applied to a TCP session?
A. It selects the SNAT policy specified in the configuration of the outgoing interface.
B. It selects the first matching central-SNAT policy from top to bottom.
C. It selects the central-SNAT policy with the lowest priority.
D. It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.
Answer: B
Question No: 12
Which configuration steps must be performed on both units to support this scenario? (Choose three.)
A. Define the phase 2 parameters.
B. Set the phase 2 encapsulation method to transport mode.
C. Define at least one firewall policy, with the action set to IPsec.
D. Define a route to the remote network over the IPsec tunnel.
E. Define the phase 1 parameters, without enabling IPsec interface mode.
Answer: A,D,E
Question No: 13
An administrator has configured a dialup IPsec VPN with XAuth. Which method statement best describes this scenario?
A. Only digital certificates will be accepted as an authentication method in phase 1.
B. Dialup clients must provide a username and password for authentication.
C. Phase 1 negotiations will skip pre-shared key exchange.
D. Dialup clients must provide their local ID during phase 2 negotiations.
Answer: B
P.S. Easily pass NSE4-5.4 Exam with Surepassexam Free Dumps & pdf vce, Try Free: https://www.surepassexam.com/NSE4-5.4-exam-dumps.html ( New Questions)