NSE4 Exam Questions

Which statements about IP-based explicit proxy authentication are true? (Choose two.)

Which statement best describes the objective of the SYN proxy feature available in SP processors?

Which of the following are possible actions for static URL filtering? (Choose three.)

Which statement best describes what SSL VPN Client Integrity Check does?

A FortiGate is configured to receive push updates from the FortiGuard Distribution Network, however, they are not being received. Which is one reason for this problem?

Which best describe the mechanism of a TCP SYN flood?

Which traffic can match a firewall policy's "Services" setting? (Choose three.)

Acme Web Hosting is replacing one of their firewalls with a FortiGate. It must be able to apply port forwarding to their back-end web servers while blocking virus uploads and TCP S...

Which of the following statements are true about the SSL Proxy certificate that must be used for SSL Content Inspection? (Choose two.)

A FortiGate device is configure to perform an AV & IPS scheduled update every hour. Given the information in the exhibit, when will the next update happen?

Which of the following statements describe some of the differences between symmetric and asymmetric cryptography? (Choose two.)

Which of the following IPsec configuration modes can be used for implementing L2TP- over- IPSec VPNs?

Which of the following statements best describes the role of a DC agents in an FSSO DC?

Which statement is correct concerning creating a custom signature?

Which operating system vulnerability can you protect when selecting signatures to include in an IPS sensor? (choose three)

Which is true of FortiGate's session table?

Which of the following statements are correct concerning the FortiGate session life support protocol? (Choose two)

Which FSSO agents are required for a FSSO agent-based polling mode solution?

Which are outputs for the command `diagnose hardware deviceinfo nic'? (Choose two.)

There are eight (8) log severity levels that indicate the importance of an event. Not including Debug, which is only needed to log diagnostic data, what are both the lowest AND hig...

Which of the following statements best describe the main requirements for a traffic session to be offload eligible to an NP6 processor? (Choose three.)

Which of the following statements are correct concerning IPsec dialup VPN configurations for FortiGate devices? (Choose two)

Which of the following statements are correct concerning IKE mode config? (Choose two)

For FortiGate devices equipped with Network Processor (NP) chips, which are true? (Choose three.)

In a FSSO agent mode solution, how does the FSSO collector agent learn each IP address?

Which of the following statements are true regarding WAN Link Load Balancing? (Choose two).

Which of the following statements best describes what the Document Fingerprinting feature is for?

Which statement describes how traffic flows in sessions handled by a slave unit in an active- active HA cluster?

Which of the following statements is correct concerning multiple vdoms configured in a FortiGate device?

Files that are larger than the oversized limit are subjected to which Antivirus check?

Which of the following traffic shaping functions can be offloaded to a NP processor? (Choose two.)

Which statement best describes what a Fortinet System on a Chip (SoC) is?

A static route is configured for a FortiGate unit from the CLI using the following commands: config router static edit 1 set device "wan1" set distance 20 set gateway 192.168.100.1...

A FortiGate devices is configured with four VDOMs: 'root' and 'vdom1' are in NAT/route mode; 'vdom2' and 'vdom2' are in transparent mode. The management VDOM is 'root'. Which of th...

You have created a new administrator account, and assign it the prof_admin profile. Which is false about that account's permissions?

In FortiOS session table output, what are the two possible `proto_state' values for a UDP session? (Choose two.)

Which of the following statements are true regarding traffic accelerated by an NP processor? (Choose two.)

Which of the following statements best describes how the collector agent learns that a user has logged off from the network?

Which define device identification? (Choose two.)

Which does FortiToken use as input when generating a token code? (Choose two.)

What types of troubleshooting can you do when uploading firmware? (Choose two.)

Which of the following FSSO modes must be used for Novell eDirectory networks?

Examine the following log message attributes and select two correct statements from the list below. (Choose two.) status="passthrough" msg="URL belongs to a category with warnings...

Which of the following statements are correct concerning the IPsec phase 1 and phase 2, shown in the exhibit? (choose two)

A FortiGate device is configured with two VDOMs. The management VDOM is 'root' , and is configured in transparent mode,'vdom1' is configured as NAT/route mode. Which traffic is gen...

What information is synchronized between two FortiGate units that belong to the same HA cluster? (Choose three)

Which action is taken by the FortiGate device when a file matches more than one rule in a Data Leak Prevention sensor?

Which protocol can an Internet browser use to download the PAC file with the web proxy configuration?

Which of the following statements are correct concerning layer 2 broadcast domains in transparent mode VDOMs?(Choose two)

If you enable the option "Generate Logs when Session Starts", what effect does this have on the number of traffic log messages generated for each session?