Valid NSE4-5.4
Dumps shared by Lead1pass for Helping Passing NSE4-5.4 Exam! Lead1pass now offer the newest NSE4-5.4 exam dumps, the Lead1pass NSE4-5.4 exam questions have been updated and answers have been corrected get the newest Lead1pass NSE4-5.4 dumps with Test Engine here:
https://www.lead1pass.com/Fortinet/NSE4-5.4-practice-exam-dumps.html (118 Q&As Dumps, 30%OFF Special Discount: 30free )

NEW QUESTION NO: 10

Which of the following statements about central NAT are true? (Choose two.)
A. Central NAT can be enabled or disabled from the CLI only.
B. IP tool references must be removed from existing firewall policies before enabling central NAT.
C. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall policy.
D. Source NAT, using central NAT, requires at least one central SNAT policy.
Answer: B,D

NEW QUESTION NO: 11
An administrator has configured a route-based IPsec VPN between two FortiGates. Which statement about this IPsec VPN configuration is true?
A. A phase 2 configuration is not required.
B. A virtual IPsec interface is automatically created after the phase 1 configuration is completed.
C. This VPN cannot be used as part of a hub and spoke topology.
D. The IPsec firewall policies must be placed at the top of the list.
Answer: B

NEW QUESTION NO: 12
How do you configure inline SSL inspection on a firewall policy? (Choose two.)
A. Execute the inline ssl inspection CLI command.
B. Enable the SSL/SSH Inspection profile on the firewall policy.
C. Enable one or more proxy-based security profiles on the firewall policy.
D. Enable one or more flow-based security profiles on the firewall policy.
Answer: B,D

NEW QUESTION NO: 13
Which statement about data leak prevention (DLP) on a FortiGate is true?
A. It can be applied to a firewall policy in a flow-based VDOM.
B. It can archive files and messages.
C. Traffic shaping can be applied to DLP sensors.
D. Files can be sent to FortiSandbox for detecting DLP threats.
Answer: B

NEW QUESTION NO: 14
Which of the following settings and protocols can be used to provide secure and restrictive administrative access to FortiGate? (Choose three.)
A. Trusted host
B. FortiTelemetry
C. HTTPS
D. SSH
E. Trusted authentication
Answer: A,C,D

NEW QUESTION NO: 15
Which traffic inspection features can be executed by a security processor (SP)? (Choose three.)
A. Attack signature matching
B. SIP session helper
C. Proxy-based antivirus
D. TCP SYN proxy
E. Flow-based web filtering
Answer: A,C,E

NEW QUESTION NO: 16
What does the command diagnose debuf fsso-polling refresh-user do?
A. It displays status information and some statistics related with the polls done by FortiGate on each DC.
B. It refreshes all users learned through agentless polling.
C. It enables agentless polling mode real-time debug.
D. It refreshes user group information form any servers connected to the FortiGate using a collector agent.
Answer: A

NEW QUESTION NO: 17
If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does the FortiGate take?
A. It blocks all future traffic for that IP address for a configured interval.
B. It notifies the administrator by sending an email.
C. It provides a DLP block replacement page with a link to download the file.
D. It archives the data for that IP address.
Answer: A

NEW QUESTION NO: 18
Under what circumstance would you enable LEARN as the Action on a firewall policy?
A. You want to capture data across all traffic and security vectors, and receive learning logs and a report with recommendations.
B. You want FortiGate to monitor a specific security profile in a firewall policy, and provide recommendations for that profile.
C. You want FortiGate to compile security feature activity from various security-related logs, such as virus and attack logs.
D. You want FortiGate to automatically modify your firewall policies as it learns your networking behavior.
Answer: B

NEW QUESTION NO: 19
Which file names will match the *.tiff file name pattern configured in a data leak prevention filter? (Choose two.)
A. tiff.tiff
B. gif.tiff
C. tiff.jpeg
D. tiff.png
Answer: A,B

NEW QUESTION NO: 20
What statement describes what DNS64 does?
A. Synthesizes DNS AAAA records from A records.
B. Converts DNS A record lookups to AAAA record lookups.
C. Translates the destination IPv6 address of the DNS traffic to an IPv4 address.
D. Translates the destination IPv4 address of the DNS traffic to an IPv6 address.
Answer: C