NSE4 Exam Questions

Which two statements are true about IPsec VPNs and SSL VPNs? (Choose two.)

Alert emails enable the FortiGate unit to send email notifications to an email address upon detection of a pre-defined event type. Which of the following are some of the available...

A user logs into a SSL VPN portal and activates the tunnel mode. The administrator has enabled split tunneling. The exhibit shows the firewall policy configuration: Which static ro...

Regarding tunnel-mode SSL VPN, which three statements are correct? (Choose three.)

DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)

Which statements regarding banned words are correct? (Choose two.)

Which statements are true regarding the use of a PAC file to configure the web proxy settings in an Internet browser? (Choose two.)

Which two methods are supported by the web proxy auto-discovery protocol (WPAD) to automatically learn the URL where a PAC file is located? (Choose two.)

What is a valid reason for using session based authentication instead of IP based authentication in a FortiGate web proxy solution?

Which two web filtering inspection modes inspect the full URL? (Choose two.)

Which web filtering inspection mode inspects DNS traffic?

Which statements are correct regarding URL filtering on a FortiGate unit? (Choose two.)

Which of the following regular expression patterns make the terms "confidential data" case insensitive?

Which statements are correct regarding application control? (Choose two.)

How do you configure a FortiGate to apply traffic shaping to P2P traffic, such as BitTorrent?

Which statements are true regarding traffic shaping that is applied in an application sensor, and associated with a firewall policy? (Choose two.)

A static route is configured for a FortiGate unit from the CLI using the following commands: config router static edit 1 set device "wan1" set distance 20 set gateway 192.168.100.1...

When does a FortiGate load-share traffic between two static routes to the same destination subnet?

Examine the static route configuration shown below; then answer the question following it. config router static edit 1 set dst 172.20.1.0 255.255.255.0 set device port1 set gateway...

In the case of TCP traffic, which of the following correctly describes the routing table lookups performed by a FortiGate operating in NAT/Route mode, when searching for a suitable...

Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it. config router static edit 1 set dst 172.20.168.0...

Examine the exhibit below; then answer the question following it. In this scenario, the FortiGate unit in Ottawa has the following routing table: S* 0.0.0.0/0 [10/0] via 172.20.170...

Review the output of the command get router info routing-table database shown in the exhibit below; then answer the question following it. Which two statements are correct regardin...

Examine the exhibit; then answer the question below. The Vancouver FortiGate initially had the following information in its routing table: S 172.20.0.0/16 [10/0] via 172.21.1.2, po...

A FortiGate is configured with three virtual domains (VDOMs). Which of the following statements is correct regarding multiple VDOMs?

Which statements are correct regarding virtual domains (VDOMs)? (Choose two.)

A FortiGate is configured with multiple VDOMs. An administrative account on the device has been assigned a Scope value of VDOM:root. Which of the following settings will this admin...

A FortiGate administrator with the super_admin profile configures a virtual domain (VDOM) for a new customer. After creating the VDOM, the administrator is unable to reassign the d...

A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit. Which of the following statements are true if the network administrator wants to ro...

A FortiGate is operating in NAT/Route mode and configured with two virtual LAN (VLAN) sub- interfaces added to the same physical interface. Which one of the following statements is...

Which statements are correct for port pairing and forwarding domains? (Choose two.)

In transparent mode, forward-domain is an CLI setting associate with ______________.

Which statements correctly describe transparent mode operation? (Choose three.)

Which of the following sequences describes the correct order of criteria used for the selection of a master unit within a FortiGate high availability (HA) cluster when override is...

Which of the following statements are correct about the HA command diagnose sys ha reset- uptime? (Choose two.)

What are the requirements for a HA cluster to maintain TCP connections after device or link failover? (Choose two.)

Review the static route configuration for IPsec shown in the exhibit; then answer the question below. Which statements are correct regarding this configuration? (Choose two.)

Review the IPsec diagnostics output of the command diagnose vpn tunnel list shown in the exhibit. Which of the following statements is correct regarding this output? (Select one an...

Review the IPsec phase 2 configuration shown in the exhibit; then answer the question below. Which statements are correct regarding this configuration? (Choose two.).

Which statement is an advantage of using a hub and spoke IPsec VPN configuration instead of a fully-meshed set of IPsec tunnels?

Review the IKE debug output for IPsec shown in the exhibit below. Which statements is correct regarding this output?

Review the configuration for FortiClient IPsec shown in the exhibit. Which statement is correct regarding this configuration?

Review the IPsec phase 1 configuration in the exhibit; then answer the question below. Which statements are correct regarding this configuration? (Choose two.)

Review the IPsec diagnostics output of the command diagnose vpn tunnel list shown in the exhibit below. Which statements are correct regarding this output? (Choose two.)

Which IPsec mode includes the peer id information in the first packet?

Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

Examine the following log message for IPS and identify the valid responses below. (Select all that apply.) 2012-07-01 09:54:28 oid=2 log_id=18433 type=ips subtype=anomaly pri=alert...

Identify the statement which correctly describes the output of the following command: diagnose ips anomaly list

Review the IPS sensor filter configuration shown in the exhibit Based on the information in the exhibit, which statements are correct regarding the filter? (Choose two.)

With FSSO, a domain user could authenticate either against the domain controller running the collector agent and domain controller agent, or a domain controller running only the do...