NSE4 Exam Questions

FSSO provides a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows active directory. Which of the following stateme...

Which statement is one disadvantage of using FSSO NetAPI polling mode over FSSO Security Event Log (WinSecLog) polling mode?

Which are two requirements for DC-agent mode FSSO to work properly in a Windows AD environment? [Choose two.]

Which statement describes what the CLI command diagnose debug authd fsso list is used for?

When the SSL proxy is NOT doing man-in-the-middle interception of SSL traffic, which certificate field can be used to determine the rating of a website?

Which tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Choose two.)

Bob wants to send Alice a file that is encrypted using public key cryptography. Which of the following statements is correct regarding the use of public key cryptography in this sc...

Which Fortinet products & features could be considered part of a comprehensive solution to monitor and prevent the leakage of senstive data? (Select all that apply.)

For data leak prevention, which statement describes the difference between the block and quarantine actions?

In which process states is it impossible to interrupt/kill a process? (Choose two.)

Examine at the output below from the diagnose sys top command: # diagnose sys top 1 Run Time: 11 days, 3 hours and 29 minutes 0U, 0N, 1S, 99I; 971T, 528F, 160KF sshd 123 S 1.9 1.2...

Examine the following output from the diagnose sys session list command: session info: proto=6 proto_state=65 duration=3 expire=9 timeout=3600 flags=00000000 sockflag=00000000 sock...

Which statements are correct regarding an IPv6 over IPv4 IPsec configuration? (Choose two.)

Which statements are true regarding IPv6 anycast addresses? (Choose two.)

What functions can the IPv6 Neighbor Discovery protocol accomplish? (Choose two.)

Which is one of the conditions that must be met for offloading the encryption and decryption of IPsec traffic to an NP6 processor?

Which statements are true about offloading antivirus inspection to a Security Processor (SP)? (Choose two.)

Which IP packets can be hardware-accelerated by a NP6 processor? (Choose two.)

Two FortiGate units with NP6 processors form an active-active cluster. The cluster is doing security profile (UTM) inspection over all the user traffic. What statements are true re...

How is the FortiGate password recovery process?

What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)

When creating FortiGate administrative users, which configuration objects specify the account rights?

Which statements are true regarding the factory default configuration? (Choose three.)

What methods can be used to access the FortiGate CLI? (Choose two.)

What capabilities can a FortiGate provide? (Choose three.)

Which network protocols are supported for administrative access to a FortiGate unit? (Choose three.)

Which is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying a FortiGate unit?

What logging options are supported on a FortiGate unit? (Choose two.)

What is the maximum number of FortiAnalyzer/FortiManager devices a FortiGate unit can be configured to send logs to?

Regarding the header and body sections in raw log messages, which statement is correct?

In HA, the option Reserve Management Port for Cluster Member is selected as shown in the exhibit below. Which statements are correct regarding this setting? (Choose two.)

The exhibit shows the Disconnect Cluster Member command in a FortiGate unit that is part of a HA cluster with two HA members. What is the effect of the Disconnect Cluster Member co...

Which firewall objects can be included in the Destination Address field of a firewall policy? (Choose three.)

Which header field can be used in a firewall policy for traffic matching?

The order of the firewall policies is important. Policies can be re-ordered from either the GUI or the CLI. Which CLI command is used to perform this function?

Examine the following CLI configuration: config system session-ttl set default 1800 end What statement is true about the effect of the above configuration line?

In which order are firewall policies processed on a FortiGate unit?

Which statements are true regarding local user authentication? (Choose two.)

Examine the following spanning tree configuration on a FortiGate in transparent mode: config system interface edit <interface name> set stp-forward enable end Which statement is co...

Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of diagnose sys session stat for the STUDENT device. Exhibit B sho...

An administrator has formed a high availability cluster involving two FortiGate units. [ Multiple upstream Layer 2 switches] -- [ FortiGate HA Cluster ] -- [ Multiple downstream La...

In a high availability cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to...

Two FortiGate devices fail to form an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of show system ha for the STUDENT device. Exhibit...

Which IPsec configuration mode can be used for implementing GRE-over-IPsec VPNs?.

You are the administrator in charge of a FortiGate acting as an IPsec VPN gateway using route- based mode. Users from either side must be able to initiate new sessions. There is on...

An administrator wants to create an IPsec VPN tunnel between two FortiGate devices. Which three configuration steps must be performed on both units to support this scenario? (Choos...

What is IPsec Perfect Forwarding Secrecy (PFS)?.

An administrator has configured a route-based site-to-site IPsec VPN. Which statement is correct regarding this IPsec VPN configuration?

A FortiGate is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which are two reasons for this problem? (Choose...

Which statement is correct regarding virus scanning on a FortiGate unit?