P.S. Vivid NSE4-5.4 bible are available on Google Drive, GET MORE: https://drive.google.com/open?id=1xSlEaFFo1TkP1Im8lI2_FaBp164pASCS
New Fortinet NSE4-5.4 Exam Dumps Collection (Question 6 - Question 15)
New Questions 6
How can you format the FortiGate flash disk?
A. Load the hardware test (HQIP) image.
B. Execute the CLI command execute formatlogdisk.
C. Load a debug FortiOS image.
D. Select the format boot device option from the BIOS menu.
Answer: D
New Questions 7
What information is flushed when the chunk-size value is changed in the config dlp settings?
A. The database for DLP document fingerprinting
B. The supported file types in the DLP filters
C. The archived files and messages
D. The file name patterns in the DLP filters
Answer: A
New Questions 8
A client workstation is connected to FortiGate port2. The Fortigate port1 is connected to an ISP router. Port2 and port3 are both configured as a software switch.
What IP address must be configured in the workstation as the default gateway?
A. The port2u2021s IP address.
B. The routeru2021s IP address.
C. The FortiGateu2021s management IP address.
D. The software switch interfaceu2021s IP address.
Answer: A
New Questions 9
An administrator needs to offload logging to FortiAnalyzer from a FortiGate with an internal hard drive. Which statements are true? (Choose two.)
A. Logs must be stored on FortiGate first, before transmitting to FortiAnalyzer
B. FortiGate uses port 8080 for log transmission
C. Log messages are transmitted as plain text in LZ4 compressed format (store-and-upload method).
D. FortiGate can encrypt communications using SSL encrypted OFTP traffic.
Answer: A,C
New Questions 10
View the example routing table.
Which route will be selected when trying to reach 10.20.30.254?
A. 10.20.30.0/26 [10/0] via 172.20.168.254, port2
B. The traffic will be dropped because it cannot be routed.
C. 10.20.30.0/24 [10/0] via 172.20.167.254, port3
D. 0.0.0.0/0 [10/0] via 172.20.121.2, port1
Answer: C
New Questions 11
Which statements about an IPv6-over-IPv4 IPsec configuration are correct? (Choose two.)
A. The remote gateway IP must be an IPv6 address.
B. The source quick mode selector must be an IPv4 address.
C. The local gateway IP must an IPv4 address.
D. The destination quick mode selector must be an IPv6 address.
Answer: B,D
New Questions 12
An administrator has blocked Netflix login in a cloud access security inspection (CASI) profile. The administrator has also applied the CASI profile to a firewall policy.
What else is required for the CASI profile to work properly?
A. You must enable logging for security events on the firewall policy.
B. You must activate a FortiCloud account.
C. You must apply an application control profile to the firewall policy.
D. You must enable SSL inspection on the firewall policy.
Answer: C
New Questions 13
Which configuration objects can be selected for the Source filed of a firewall policy? (Choose two.)
A. FQDN address
B. IP pool
C. User or user group
D. Firewall service
Answer: B,C
New Questions 14
Which of the following Fortinet hardware accelerators can be used to offload flow-based antivirus inspection? (Choose two.)
A. SP3
B. CP8
C. NP4
D. NP6
Answer: C,D
Explanation: Sessions that require proxy-based security features (for example, virus scanning, IPS, application control and so on) are not fast pathed and must be processed by the CPU. Sessions that require flow-based security features can be offloaded to NP4 or NP6 network processors if the FortiGate supports NTurbo.
New Questions 15
A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups.
What is required in the SSL VPN configuration to meet these requirements?
A. Two separated SSL VPNs in different interfaces of the same VDOM
B. Different SSL VPN realms for each group
C. Different virtual SSLVPN IP addresses for each group
D. Two firewall policies with different captive portals
Answer: D
Recommend!! Get the Vivid NSE4-5.4 dumps in VCE and PDF From Allfreedumps, Welcome to download: https://www.allfreedumps.com/NSE4-5.4-dumps.html (New Q&As Version)