Configure an Intrusion Prevention System (IPS) to Protect a Network from Threats and Vulnerabilities NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which condition is a common cause of high CPU usage on a FortiGate running IPS?

   • AExcessive traffic volume exceeding the device's inspection capacity
   • BDisabling hardware acceleration
   • CA low number of IPS signatures enabled
   • DUsing the monitor action instead of block
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which scenario is a common use case for deploying IPS?

   • AProtecting a web server from application-layer attacks
   • BReplacing a firewall for basic packet filtering
   • CEncrypting traffic between two sites
   • DBlocking all outbound email traffic
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a typical IPS deployment scenario?

   • ABalancing network load across multiple servers
   • BProviding wireless access to guests
   • CProtecting client workstations from malware and exploits
   • DManaging user authentication
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which IPS implementation approach is most appropriate for protecting a web server without disrupting legitimate web traffic?

   • ADisable all signatures and rely on firewall policies only
   • BEnable only signatures for non-web protocols
   • CEnable signatures for web application attacks and use the block action for high-severity signatures only
   • DEnable all signatures and use the block action for all of them
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which statement correctly describes how an IPS sensor is assigned to inspect traffic?

   • AIt is assigned globally and applies to all traffic automatically.
   • BIt is applied to users, inspecting all traffic from that user regardless of policy.
   • CIt is applied per firewall policy, allowing different sensors for different traffic flows.
   • DIt is applied to interfaces, inspecting all traffic entering that interface.
   Reveal Solution Discussion Select an answer first