Online Access Free NSE4-5.4 Practice Test

Which statement best describes what SSL VPN Client Integrity Check does?

• A.Detects the Windows client security applications running in the SSL VPN client's PCs.
• B.Verifies which SSL VPN portal must be presented to each SSL VPN user.
• C.Validates the SSL VPN user credential.
• D.Blocks SSL VPN connection attempts from users that has been blacklisted.
• E.Verifies that the latest SSL VPN client is installed in the client's PC.

Which of the following statements are true regarding Local User Authentication? (Select all that apply.)

• A.Local users are for administration accounts only and cannot be used for identity policies.
• B.Local user authentication is based on usernames and passwords stored locally on the FortiGate unit.
• C.Two-factor authentication can be enabled on a per user basis.
• D.Administrators can create an account for the user locally and specify the remote server to verify the password.

Which statement describes what the CLI command diagnose debug authd fsso list is used for

• A.Displays a listing of all connected FSSO collector agents.
• B.Monitors communications between the FSSO collector agent and FortiGate unit.
• C.Lists all DC Agents installed on all domain controllers.
• D.Displays which users are currently logged on using FSSO.

What attributes are always included in a log header? (Choose three.)

• A.subtype
• B.level
• C.time
• D.policyid
• E.user
• F.duration

What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully- meshed set of IPSec tunnels? (Select all that apply.)

• A.Using a hub and spoke topology reduces the number of tunnels.
• B.Using a hub and spoke topology is required to achieve full redundancy.
• C.Using a hub and spoke topology provides stronger encryption.
• D.Using a hub and spoke topology simplifies configuration.