NSE4 Exam Questions

Which of the following actions that can be taken by the Data Leak Prevention scanning? (Choose three.)

What configuration objects are automatically added when using the FortiGate's FortiClient VPN Configurations Wizard?(Choose two)

What is required in a FortiGate configuration to have more than one dialup IPsec VPN using aggressive mode?

Examine the network topology diagram in the exhibit; the workstation with the IP address 212.10.11.110 sends a TCP SYN packet to the workstation with the IP address 212.10.11.20. W...

In a FSSO agentless polling mode solution, where must the collector agent be?

Which authentication methods does FortiGate support for firewall authentication? (Choose two.)

How many packets are interchanged between both IPSec ends during the negotiation of a main- mode phase 1?

Which is NOT true about the settings for an IP pool type port block allocation?

You have configured the DHCP server on a FortiGate's port1 interface (or internal, depending on the model) to offer IPs in a range of 192.168.1.65-192.168.1.253. When the first hos...

Regarding the use of web-only mode SSL VPN, which statement is correct?

Which of the following network protocols can be inspected by the Data Leak Prevention scanning? (Choose three.)

Which of the following IPsec configuration modes can be used when the FortiGate is running in NAT mode?

The exhibit shows a part output of the diagnostic command 'diagnose debug application ike 255', taken during establishment of a VPN. Which of the following statement are correct co...

Which statement best describes what SSL.root is?

Which statement concerning IPS is false?

Which of the following statements are correct differences between NAT/route and transparent mode? (Choose two.)

Which type of conserve mode writes a log message immediately, rather than when the device exits conserve mode?

Which of the following statements are true regarding the web filtering modes? (Choose two.)

Which of the following statements are characteristics of a FSSO solution using advanced access mode? (Choose three.)

Which of the following are operating mode supported in FortiGate devices? (Choose two)

Which of the following statements is correct regarding FortiGate interfaces and spanning tree protocol? (Choose Two)

Which of the following statements are correct regarding FortiGate virtual domains (VDOMs)? (Choose two)

Which of the following IKE modes is the one used during the IPsec phase 2 negotiation?

Which user group types does FortiGate support for firewall authentication? (Choose three.)

Which authentication scheme is not supported by the RADIUS implementation on FortiGate?

The exhibit is a screen shot of an Application Control profile. Different settings are circled and numbered. Select the number identifying the setting which will provide additional...

Of the following information, what can be recorded by a Data Leak Prevention sensor configured to do a summary archiving? (Choose three.)

Which portion of the configuration does an administrator specify the type of IPsec configuration (either policy-based or route-based)?

In a high availability cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to...

The exhibit shows a FortiGate routing table. Which of the following statements are correct?(Choose two)

Which of the following statements is true regarding the TCP SYN packets that go from a client, through an implicit web proxy (transparent proxy), to a web server listening at TCP p...

Which of the following statements are correct regarding SSL VPN Web-only mode? (Choose two.)

Which are the three different types of Conserve Mode that can occur on a FortiGate device? (Choose three.)

Examine this log entry. What does the log indicate? (Choose three.) date=2013-12-04 time=09:30:18 logid=0100032001 type=event subtype=system level=information vd="root" user="admin...

Which of the following statements are correct about NTLM authentication? (Choose three)

Which of the following statements are true about IPsec VPNs? (Choose three.)

Which UTM feature sends a UDP query to FortiGuard servers each time FortiGate scans a packet (unless the response is locally cached)?

Which of the following combinations of two FortiGate device configurations (side A and side B), can be used to successfully establish an IPsec VPN between them? (choose two)

What must be configured in order to keep two static routes to the same destination in the routing table?

A FortiGate devices has two VDOMs in NAT/route mode. Which of the following solutions can be implemented by a network administrator to route traffic between the two VDOMs.(Choose t...

What is the default criteria for selecting the HA master unit in a HA cluster?

Which of the following are considered log types? (Choose three.)

The exhibit shoes three static routes. Which routes will be used to route the packets to the destination IP address 172.20.168.1?

In which order are firewall policies processed on a FortiGate unit?

Which of the following statements must be true for a digital certificate to be valid? (Choose two.)

Which of the following authentication methods are supported in an IPsec phase 1? (Choose two.)

Which of the following statements best describe what a FortiGate does when packets match a black hole route?

If you have lost your password for the "admin" account on your FortiGate, how should you reset it?

What actions are possible with Application Control? (Choose three.)

Two FortiGate units with NP6 processors form an active-active cluster. The cluster is doing security profile (UTM) inspection over all the user traffic. What statements are true re...