NSE4_JM

Which three actions are valid for static URL filtering?

• Allow

• Block

• Exempt

• Shape

• Warning

Which three settings and protocols can be used to provide secure and restrictive administrative access to FortiGate?

• Trusted authentication

• FortiTelemetry

• SSH

• Trusted host

• HTTPS

Which is not a FortiGate feature?

• Database auditing

• Intrusion prevention

• Web filtering

• Application control

What actions are possible with Application Control?

• Warn

• Allow

• Block

• Traffic Shaping

• Quarantine

An administrator has configured a route-based site-to-site IPsec VPN. Which statement is correct regarding this IPsec VPN configuration?

• The IPsec firewall policies must be placed at the top of the list.

• This VPN cannot be used as a part of a hub and spoke topology.

• Routes are automatically created based on the quick mode selectors.

• A virtual IPsec interface is automatically created after the Phase 1 configuration is completed.

What attributes are always included in a log header?

• policyid

• level

• user

• time

• subtype

Which of the following settings can be configured per VDOM?

• Operating mode (NAT/route or transparent)

• Static routes

• Hostname

• System time

• Firewall Policies

Which user group types does FortiGate support for firewall authentication?

• RSSO

• Firewall

• LDAP

• NTLM

• FSSO

Which best describes the mechanism of a TCP SYN flood?

• The attackers keeps open many connections with slow data transmission so that other clients cannot start new connections.

• The attackers sends a packets designed to sync with the FortiGate

• The attacker sends a specially crafted malformed packet, intended to crash the target by exploiting its parser.

• The attacker starts many connections, but never acknowledges to fully form them