Wednesday 15 November 2017

Fortinet NSE4-5.4 Question Answer

Which statements about IP-based explicit proxy authentication are true? (Choose two.)

A. IP-based authentication is best suited to authenticating users behind a NAT device.
B. Sessions from the same source address are treated as a single user.
C. IP-based authentication consumes less FortiGate’s memory than session-based authentication.
D. FortiGate remembers authenticated sessions using browser cookies.

Answer: B,D


Which statement about data leak prevention (DLP) on a FortiGate is true?

A. Traffic shaping can be applied to DLP sensors.
B. It can be applied to a firewall policy in a flow-based VDOM.
C. Files can be sent to FortiSandbox for detecting DLP threats.
D. It can archive files and messages.

Answer: D