Create Next App

Exam contains 569 questions

Page 12 of 95

Question 67 🔥

What statement describes what DNS64 does?

Which database solution meets these requirements?

A. Converts DNS A record lookups to AAAA record lookups.

Highly voted

B. Translates the destination IPv6 address of the DNS traffic to an IPv4 address.

Highly voted

C. Synthesizes DNS AAAA records from A records.

Highly voted

D. Translates the destination IPv4 address of the DNS traffic to an IPv6 address.

Highly voted

Discussion of the question

Question 68 🔥

What does the command diagnose debug fsso-polling refresh-user do?

Which database solution meets these requirements?

A. It refreshes user group information form any servers connected to the FortiGate using a collector agent.

Highly voted

B. It refreshes all users learned through agentless polling.

Highly voted

C. It displays status information and some statistics related with the polls done by FortiGate on each D

Highly voted

D. It enables agentless polling mode real-time debug.

Highly voted

Discussion of the question

Question 69 🔥

Why must you use aggressive mode when a local FortiGate IPsec gateway hosts multiple dialup tunnels?

Which database solution meets these requirements?

A. The FortiGate is able to handle NATed connections only with aggressive mode.

Highly voted

B. FortiClient supports aggressive mode.

Highly voted

C. The remote peers are able to provide their peer IDs in the first message with aggressive mode.

Highly voted

D. Main mode does not support XAuth for user authentication.

Highly voted

Discussion of the question

Question 70 🔥

An administrator has configured the following settings:What does the configuration do? (Choose two.)

Which database solution meets these requirements?

A. Reduces the amount of logs generated by denied traffic.

Highly voted

B. Enforces device detection on all interfaces for 30 minutes.

Highly voted

C. Blocks denied users for 30 minutes.

Highly voted

D. Creates a session for traffic being denied.

Highly voted

Discussion of the question

Question 71 🔥

Which statements about FortiGate inspection modes are true? (Choose two.)

Which database solution meets these requirements?

A. The default inspection mode is proxy based.

Highly voted

B. Switching from proxy-based mode to flow-based, then back to proxy-based mode, will not result in the original configuration.

Highly voted

C. Proxy-based inspection is not available in VDOMs operating in transparent mode.

Highly voted

D. Flow-based profiles must be manually converted to proxy-based profiles before changing the inspection mode from flow based to proxy based.

Highly voted

Discussion of the question

Question 72 🔥

A FortiGate interface is configured with the following commands:What statements about the configuration are correct? (Choose two.)

Which database solution meets these requirements?

A. IPv6 clients connected to port1 can use SLAAC to generate their IPv6 addresses.

Highly voted

B. FortiGate can provide DNS settings to IPv6 clients.

Highly voted

C. FortiGate can send IPv6 router advertisements (RAs.)

Highly voted

D. FortiGate can provide IPv6 addresses to DHCPv6 client.

Highly voted

Discussion of the question

Ready to Pass Your Certification Test

fortinet NSE4_54

Exam contains 569 questions

Lorem ipsum dolor sit amet consectetur. Eget sed turpis aenean sit aenean. Integer at nam ullamcorper a.

Company

Product

Resources

Follow us