FREE NSE4-5.4 FortiOS 5.4 Fortinet Real Dumps Questions

1. An administrator has blocked Netflix login in a cloud access security inspection (CASI) profile. The administrator has also applied the CASI profile to a firewall policy.
What else is required for the CASI profile to work properly?

2. How does FortiGate look for a matching firewall policy to process traffic?

3. How do you configure a FortiGate to do traffic shaping of P2P traffic, such as BitTorrent?

4. Which file names will match the *.tiff file name pattern configured in a data leak prevention filter? (Choose two.)

5. An administrator has configured a dialup IPsec VPN with XAuth. Which method statement best describes this scenario?

6.

Which statements about the output are correct? (Choose two.)

7. Which component of FortiOS performs application control inspection?

8. Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)

9. What statement describes what DNS64 does?

10. What does the command diagnose debuf fsso-polling refresh-user do?

11. Why must you use aggressive mode when a local FortiGate IPsec gateway hosts multiple dialup tunnels?

12.

What does the configuration do? (Choose two.)

13. Which statements about FortiGate inspection modes are true? (Choose two.)

14.

Which statement about this configuration is correct?

15.

Which of the following statements are true? (Choose two.)

16. In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

17. A FortiGate is operating in NAT/Route mode and configured with two virtual LAN (VLAN) sub-interfaces added to the same physical interface.
Which statement about the VLAN IDs in this scenario is true?

18. Which of the following statements are true when using Web Proxy Auto-discovery Protocol (WPAD) with the DHCP discovery method? (Choose two.)

19. What inspections are executed by the IPS engine? (Choose three.)

20.

A client workstation is connected to FortiGate port2. The Fortigate port1 is connected to an ISP router. Port2 and port3 are both configured as a software switch.
What IP address must be configured in the workstation as the default gateway?