NSE4-5-4 Fortinet Fortinet Network Security Expert 4 Written Exam - FortiOS 5.4
Question: 488 An administrator needs to offload logging to FortiAnalyzer from a FortiGate with an internal hard drive. Which statements are true? (Choose two.) A. Logs must be stored on FortiGate first, before transmitting to FortiAnalyzer B. FortiGate uses port 8080 for log transmission C. Log messages are transmitted as plain text in LZ4 compressed format (store-and-upload method). D. FortiGate can encrypt communications using SSL encrypted OFTP traffic. Answer: A,C Question: 489 Which of the following statements describe WMI polling mode for FSSO collector agent? (Choose two.) A. The collector agent does not need to search any security event logs. B. WMI polling can increase bandwidth usage with large networks. C. The NetSessionEnum function is used to track user logoffs. D. The collector agent uses a Windows API to query DCs for user logins. Answer: B,D Question: 490 An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.) A. The interface has been configured for one-arm sniffer.
You've reached the end of your free preview.
Want to read all 6 pages?
- Fall '20
- IP address