NSE4 Exam Questions

Which antivirus inspection mode must be used to scan SMTP, FTP, POP3 and SMB protocols?

Which antivirus and attack definition update options are supported by FortiGate units? (Choose two.)

Examine the exhibit; then answer the question below. Which statement describes the green status indicators that appear next to the different FortiGuard Distribution Network service...

For traffic that does match any configured firewall policy, what is the default action taken by the FortiGate?

What methods can be used to deliver the token code to a user that is configured to use two-factor authentication? (Choose three.)

The FortiGate port1 is connected to the Internet. The FortiGate port2 is connected to the internal network. Examine the firewall configuration shown in the exhibit; then answer the...

When firewall policy authentication is enabled, which protocols can trigger an authentication challenge? (Choose two.)

Which statement regarding the firewall policy authentication timeout is true?

Which two statements are true regarding firewall policy disclaimers? (Choose two.)

Which of the following items is NOT a packet characteristic matched by a firewall service object?

When firewall policy authentication is enabled, only traffic on supported protocols will trigger an authentication challenge. Select all supported protocols from the following:

A client can create a secure connection to a FortiGate device using SSL VPN in web-only mode. Which one of the following statements is correct regarding the use of web-only mode SS...

A client can establish a secure connection to a corporate network using SSL VPN in tunnel mode. Which of the following statements are correct regarding the use of tunnel mode SSL V...

In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel between two separate private networks. Which of the following configuration steps must be perf...

How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has enabled split tunneling. Given th...

Which of the following antivirus and attack definition update options are supported by FortiGate units? (Select all that apply.)

A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?

Which of the following items does NOT support the Logging feature?

Which of the following is true regarding Switch Port Mode?

An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network. W...

Which of the following statements are correct regarding logging to memory on a FortiGate unit? (Select all that apply.)

Which of the following spam filtering methods are supported on the FortiGate unit? (Select all that apply.)

Which of the following email spam filtering features is NOT supported on a FortiGate unit?

Examine the exhibit shown below; then answer the question following it. Which of the following statements best describes the green status indicators that appear next to the differe...

A FortiGate unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which of the following statements are poss...

A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profil...

Caching improves performance by reducing FortiGate unit requests to the FortiGuard server. Which of the following statements are correct regarding the caching of FortiGuard respons...

Which of the following Fortinet products can receive updates from the FortiGuard Distribution Network? (Select all that apply.)

How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)

What are the valid sub-types for a Firewall type policy? (Select all that apply)

In which order are firewall policies processed on the FortiGate unit?

Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)

The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate unit's GUI and also using the CLI. The command used in the CLI to perform this...

You wish to create a firewall policy that applies only to traffic intended for your web server. The web server has an IP address of 192.168.2.2 and a /24 subnet mask. When defining...

A FortiAnalyzer device could use which security method to secure the transfer of log data from FortiGate devices?

Which of the following network protocols are supported for administrative access to a FortiGate unit?

Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

A FortiGate unit can provide which of the following capabilities? (Select all that apply.)

Which of the following methods can be used to access the CLI? (Select all that apply.)

When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password. If the password is forgotten, the...

When creating administrative users which of the following configuration objects determines access rights on the FortiGate unit.

Which of the following options can you use to update the virus definitions on a FortiGate unit? (Select all that apply.)

Which of the following statements are true of the FortiGate unit's factory default configuration?

Under the System Information widget on the dashboard, which of the following actions are available for the system configuration? (Select all that apply.)

Encrypted backup files provide which of the following benefits? (Select all that apply.)

The FortiGate unit's GUI provides a link to update the firmware. Clicking this link will perform which of the following actions?

Which of the following products is designed to manage multiple FortiGate devices?

Which of the following products provides dedicated hardware to analyze log data from multiple FortiGate devices?

Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.)