Online Access Free NSE4 Practice Test

A static route is configured for a FortiGate unit from the CLI using the following commands:
config router static
edit 1
set device "wan1"
set distance 20
set gateway 192.168.100.1
next
end
Which of the following conditions are required for this static default route to be displayed in the FortiGate unit's routing table? (Choose two.)

• A.The link status of the wan1 interface is displayed as up.
• B.The administrative status of the wan1 interface is displayed as down.
• C.All other default routers should have a lower distance.
• D.The wan1 interface address and gateway address are on the same subnet.

Which antivirus inspection mode must be used to scan SMTP, FTP, POP3 and SMB protocols?

• A.Flow-based.
• B.Proxy-based.
• C.DNS-based.
• D.Man-in-the-middle.

How can DLP file filters be configured to detect Office 2010 files?

• A.File NamE. "*.ppt", "*.doc", "*.xls"
• B.File Nam "*.pptx", "*.docx", "*.xlsx"
• C.File TypE. Unknown Filetype(unknown)
• D.File TypE. Microsoft Office(msoffice)
• E.File TypE. Archive(zip)

Which statement best describes the objective of the SYN proxy feature available in SP processors?

• A.Accelerate the TCP 3-way handshake
• B.Collect statistics regarding traffic sessions
• C.Protect against SYN flood attacks.
• D.Analyze the SYN packet to decide if the new session can be offloaded to the SP processor

Which statement is in advantage of using a hub and spoke IPsec VPN configuration instead of a fully-meshed set of IPsec tunnels?

• A.Using a hub and spoke topology requires fewer tunnels.
• B.Using a hub and spoke topology requires more routes.
• C.Using a hub and spoke topology uses stronger encryption protocols.
• D.Using a hub and spoke topology provides full redundancy.