Fortinet NSE4 試験概要:

Fortinet NSE4 試験シラバストピック:

Fortinet Network Security Expert 4 Written Exam (400) 認定 NSE4 試験問題：

問題 #1
Which statements regarding banned words are correct? (Choose two.)

A. The FortiGate can scan web pages and email messages for instances of banned words.
B. The FortiGate updates banned words on a periodic basis.
C. Banned words can be expressed as simple text, wildcards and regular expressions.
D. Content is automatically blocked if a single instance of a banned word appears.

問題 #2
What attributes are always included in a log header? (Choose three.)

A. time
B. policyid
C. subtype
D. level
E. duration
F. user

問題 #3
Examine the static route configuration shown below; then answer the question following it.
config router static
edit 1
set dst 172.20.1.0 255.255.255.0
set device port1
set gateway 172.11.12.1
set distance 10
set weight 5
next
edit 2
set dst 172.20.1.0 255.255.255.0
set blackhole enable
set distance 5
set weight 10
next
end
Which of the following statements correctly describes the static routing configuration provided? (Choose two.)

A. All traffic to 172.20.1.0/24 is dropped by the FortiGate.
B. The FortiGate unit does NOT create a session entry in the session table when the traffic is being routed by the blackhole route.
C. As long as port1 is up, all traffic to 172.20.1.0/24 is routed by the static route number 1.
if the interface port1 is down, the traffic is routed using the blackhole route.
D. The FortiGate unit creates a session entry in the session table when the traffic is being routed by the blackhole route.

問題 #4
A FortiGate is configured with three virtual domains (VDOMs). Which of the following statements is correct regarding multiple VDOMs?

A. The FortiGate must be a model 1000 or above to support multiple VDOMs.
B. Changing the operational mode of a VDOM requires a reboot of the FortiGate.
C. The FortiGate supports any combination of VDOMs in NAT/Route and transparent modes.
D. A license has to be purchased and applied to the FortiGate before VDOM mode could be enabled.

問題 #5
Which statement describes how traffic flows in sessions handled by a slave unit in an active-active HA cluster?

A. Packets arrived at both units simultaneously, but only the salve unit forwards the session.
B. Packets are first sent to the master unit, which then forwards the packets to the slave unit.
C. Packet are sent directly to the slave unit using the slave physical MAC address.
D. Packets are sent directly to the slave unit using the HA virtual MAC address.

解説：