This page was exported from Free IT Exam VCE&PDF Dumps Download On Braindump2go.com [ http://www.dumps4cert.org ] Export date:Sun Aug 25 7:24:50 2019 / +0000 GMT ___________________________________________________ Title: [2017 New]100% Exam Pass-NSE4 Exam VCE and PDF Free from Braindump2go[Q1-Q10] --------------------------------------------------- 2017/July New NSE4 Exam Dumps with PDF and VCE Free Updated in www.Braindump2go.com  Today!100% NSE4 Real Exam Questions! 100% NSE4 Exam Pass Guaranteed! 1.|2017 New NSE4 Exam Dumps (PDF & VCE) 360Q&As Download:https://www.braindump2go.com/nse4.html 2.|2017 New NSE4 Exam Questions & Answers Download:https://drive.google.com/drive/folders/0B75b5xYLjSSNVi1ISU1vQUxBOTg?usp=sharing QUESTION 1Which two statements are true about IPsec VPNs and SSL VPNs? (Choose two.) A.    SSL VPN creates a HTTPS connection. IPsec does not.B.    Both SSL VPNs and IPsec VPNs are standard protocols.C.    Either a SSL VPN or an IPsec VPN can be established between two FortiGate devices.D.    Either a SSL VPN or an IPsec VPN can be established between an end-user workstation and a FortiGate device. Answer: AD QUESTION 2Alert emails enable the FortiGate unit to send email notifications to an email address upon detection of a pre-defined event type.Which of the following are some of the available event types in Web Config? (Select all that apply.) A.    Intrusion detected.B.    Successful firewall authentication.C.    Oversized file detected.D.    DHCP address assigned.E.    FortiGuard Web Filtering rating error detected. Answer: A QUESTION 3A user logs into a SSL VPN portal and activates the tunnel mode. The administrator has enabled split tunneling. The exhibit shows the firewall policy configuration: Which static route is automatically added to the client's routing table when the tunnel mode is activated? A.    A route to a destination subnet matching the Internal_Servers address object.B.    A route to the destination subnet configured in the tunnel mode widget.C.    A default route.D.    A route to the destination subnet configured in the SSL VPN global settings. Answer: A QUESTION 4Regarding tunnel-mode SSL VPN, which three statements are correct? (Choose three.) A.    Split tunneling is supported.B.    It requires the installation of a VPN client.C.    It requires the use of an Internet browser.D.    It does not support traffic from third-party network applications.E.    An SSL VPN IP address is dynamically assigned to the client by the FortiGate unit. Answer: ABE QUESTION 5DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.) A.    SNMPB.    IPSecC.    SMTPD.    POP3E.    HTTP Answer: CDE QUESTION 6Which statements regarding banned words are correct? (Choose two.) A.    Content is automatically blocked if a single instance of a banned word appears.B.    The FortiGate updates banned words on a periodic basis.C.    The FortiGate can scan web pages and email messages for instances of banned words.D.    Banned words can be expressed as simple text, wildcards and regular expressions. Answer: CD QUESTION 7Examine the following FortiGate web proxy configuration; then answer the question below:config web-proxy explicitset pac-file-server-status enableset pac-file-server-port 8080set pac-file-name wpad.datendAssuming that the FortiGate proxy IP address is 10.10.1.1, which URL must an Internet browser use to download the PAC file? A.    https://10.10.1.1:8080B.    https://10.10.1.1:8080/wpad.datC.    http://10.10.1.1:8080/D.    http://10.10.1.1:8080/wpad.dat Answer: D QUESTION 8Which statements are true regarding the use of a PAC file to configure the web proxy settings in an Internet browser? (Choose two.) A.    Only one proxy is supported.B.    Can be manually imported to the browser.C.    The browser can automatically download it from a web server.D.    Can include a list of destination IP subnets where the browser can connect directly to without using a proxy. Answer: CD QUESTION 9Which two methods are supported by the web proxy auto-discovery protocol (WPAD) to automatically learn the URL where a PAC file is located? (Choose two.) A.    DHCPB.    BOOTPC.    DNSD.    IPv6 autoconfiguration Answer: AC QUESTION 10What is a valid reason for using session based authentication instead of IP based authentication in a FortiGate web proxy solution? A.    Users are required to manually enter their credentials each time they connect to a different web site.B.    Proxy users are authenticated via FSSO.C.    There are multiple users sharing the same IP address.D.    Proxy users are authenticated via RADIUS. Answer: C !!!RECOMMEND!!!1.|2017 New NSE4 Exam Dumps (PDF & VCE) 360Q&As Download:https://www.braindump2go.com/nse4.html 2.|2017 New NSE4 Study Gudie Video: YouTube Video: YouTube.com/watch?v=lcPSEfJYR0M --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2017-07-20 07:41:10 Post date GMT: 2017-07-20 07:41:10 Post modified date: 2017-07-20 07:41:10 Post modified date GMT: 2017-07-20 07:41:10 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com