Exam (elaborations)
NSE4 EXAM WITH COMPLETE SOLUTION
- Course
- Institution
NSE4 EXAM WITH COMPLETE SOLUTION ...
[Show more]
Content preview
NSE4 EXAM WITH COMPLETESOLUTION
In what operating mode does FortiGate need to be, to route traffic between VLANs? -
Answer NAT Mode
FortiGate NAT Mode - Answer 1.) Routes according to OSI Layer 3 (IP Address) as a
router
2.) FortiGate interfaces have IP addresses associated with them
FortiGate Transparent Mode - Answer 1.) Forwards according to OSI Layer 2 (MAC
Address) as a transparent bridge
2.) Fortigate interfaces usually have no IP address
3.) Requires no IP address changes in the network
Which port has an IP address in Transparent Operation Mode - Answer HA heartbeat
ports
What is a transparent bridge - Answer has a MAC address table that contains the
interface that must be used to reach each MAC address.
True statement about FortiGate operating in transparent mode? - Answer It has a
management IP address.
How can an administrator configure FortiGate to have four interfaces in the same
broadcast domain? - Answer Configure the oparation mode as transparent and use the
same forward domain ID
Wildcard VLAN - Answer setting specifies how policies are applied to different VLANS
whos traffic flow between the the pair on the virtual wire.
ENABLED = virtual wire pair policies are applied equally to the physical and VLAN
DISABLED = virtual wire pair policies are applied only to the physical interfaces. Traffic
with VLAN tag is blocked.
How is traffic handled in a virtual wire pair? - Answer incoming traffice to one interface
is always forwarded out through the other interface.
What configuration setting must be enabled to allow VLAN-tagged traffic through a
virtual wire pair - Answer Wildcard VLAN
Software Switch - Answer a software switch groups multiple interface to form a virtual
switch which as as a traditional layer 2 switch. One IP shared by all physical switch
, interfaces and member SSIDs/ one broadcast domain. Only supported in NAT mode
In which operating mode is the software switch function supported? - Answer NAT mode
what can be members of a software switch? - Answer wireless interface and directly
connected.
STP - Answer Spanning Tree Protocol: select one switch in the broadcast domain to
serve as the root bridge. Uses BPDUs to provide each switch with it's neighbors
information
#config system stp - Answer to configure FortiGate to participate in STP
#config system interface - Answer configure each interface to either block or forward
STP
What is the default STP mode for FortiGate? - Answer all STP functions are
Block/disabled
# debug fsso-polling refresh-userdo? - Answer It refreshes all users learned through
agentless polling.
Which two statements about advanced AD access mode for the FSSO collector agent
are true? (Choose two.) - Answer 1.) FortiGate can act as an LDAP client to configure
the group filters.
2.)
Which statement about the HA override setting in FortiGate HA clusters is true? -
Answer
Which three protocols can a client use to authenticate against a FortiGate configured as
transparent web proxy? (Choose three.) - Answer
How can you configure the web proxy to block HTTP packets that request a specific
HTTP method? - Answer
When does the FortiGate enter into fail-open session mode? - Answer When memory
usage goes above the extreme threshold.
What is eXtended Authentication (XAuth)? - Answer
IKE - Answer uses UDP port 500 (and UDP port 4500 when crossing NAT)
ADVPN - Answer auto Discovery VPN : FortiGate feature that achieves the benefits of a
full mesh topology with the easier configuration and scalability benefit of hub-and-spoke
and partial-mesh.
Which VPN topology does not allow direct communication between spokes? - Answer
Hub-and-Spoke
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Flat. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $8.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
77858 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now