WorksheetsNSE4_JM
Total questions: 9
Worksheet time: 7mins
Which three actions are valid for static URL filtering?
Allow
Block
Exempt
Shape
Warning
Which three settings and protocols can be used to provide secure and restrictive administrative access to FortiGate?
Trusted authentication
FortiTelemetry
SSH
Trusted host
HTTPS
Which is not a FortiGate feature?
Database auditing
Intrusion prevention
Web filtering
Application control
What actions are possible with Application Control?
Warn
Allow
Block
Traffic Shaping
Quarantine
An administrator has configured a route-based site-to-site IPsec VPN. Which statement is correct regarding this IPsec VPN configuration?
The IPsec firewall policies must be placed at the top of the list.
This VPN cannot be used as a part of a hub and spoke topology.
Routes are automatically created based on the quick mode selectors.
A virtual IPsec interface is automatically created after the Phase 1 configuration is completed.
What attributes are always included in a log header?
policyid
level
user
time
subtype
Which of the following settings can be configured per VDOM?
Operating mode (NAT/route or transparent)
Static routes
Hostname
System time
Firewall Policies
Which user group types does FortiGate support for firewall authentication?
RSSO
Firewall
LDAP
NTLM
FSSO
Which best describes the mechanism of a TCP SYN flood?
The attackers keeps open many connections with slow data transmission so that other clients cannot start new connections.
The attackers sends a packets designed to sync with the FortiGate
The attacker sends a specially crafted malformed packet, intended to crash the target by exploiting its parser.
The attacker starts many connections, but never acknowledges to fully form them
