NSE4-5.4 試験問題を無料オンラインアクセス

Which statements about FortiGate inspection modes are true? (Choose two.)

• A.Switching from proxy-based mode to flow-based, then back to proxy-based mode, will not result in the original configuration.
• B.The default inspection mode is proxy based.
• C.Proxy-based inspection is not available in VDOMs operating in transparent mode.
• D.Flow-based profiles must be manually converted to proxy-based profiles before changing the inspection mode from flow based to proxy based.

Which part of an email message exchange is NOT inspected by the POP3 and IMAP proxies?

• A.Message headers
• B.Message body
• C.TCP connection
• D.File attachments

Which user group types does FortiGate support for firewall authentication? (Choose three.)

• A.NTLM
• B.LDAP
• C.FSSO
• D.RSSO
• E.Firewall

Which statement is an advantage of using a hub and spoke IPsec VPN configuration instead of a fully-meshed set of IPsec tunnels?

• A.Using a hub and spoke topology requires fewer tunnels.
• B.Using a hub and spoke topology uses stronger encryption protocols.
• C.Using a hub and spoke topology requires more routes.
• D.Using a hub and spoke topology provides full redundancy.

Which action is taken by the FortiGate device when a file matches more than one rule in a Data Leak Prevention sensor?

• A.The actions specified in the first rule from top to bottom
• B.All actions specified by all the matched rules.
• C.The actions specified by the rule that most specifically matched the file
• D.The actions specified in the rule with the higher priority number