NSE4 - Fortinet Practice Exam Questions - 100% Free Demo - VCE Exams Test

Complete Fortinet NSE4 Certification Training - Get NSE4 Certified

Question 1

What is valid reason for using session based authentication instead of IP based authentication in a FortiGate web proxy solution?

A: Users are required to manually enter their credentials each time they connect to a different web site.
B: Proxy users are authenticated via FSSO.
C: There are multiple users sharing the same IP address.
D: Proxy users are authenticated via RADIUS.

Correct Answer: C

Question 2

Which antivirus and attack definition update options are supported by FortiGate units? (Choose two.)

A: Manual update by downloading the signatures from the support site.
B: FortiGuard pull updates.
C: Push updates from a FortiAnalyzer.
D: execute fortiguard-AV-AS command from the CLI.

Correct Answer: AB

Question 3

Data leak prevention archiving gives the ability to store files and message data onto a FortiAnalyzer unit for which of the following types of network traffic? (Choose three.)

A: POP3
B: SNMP
C: IPsec
D: SMTP
E: HTTP

Correct Answer: ADE

Question 4

Which statements correctly describe transparent mode operation? (Choose three.)

A: The FortiGate acts as transparent bridge and forwards traffic at Layer-2.
B: Ethernet packets are forwarded based on destination MAC addresses, NOT IP addresses.
C: The transparent FortiGate ia clearly visible to network hosts in an IP trace route.
D: Permits inline traffic inspection and firewalling without changing the IP scheme of the network.
E: All interfaces of the transparent mode FortiGate device most be on different IP subnets.

Correct Answer: ABD

Question 5

Two FortiGate units with NP6 processors form an active-active cluster. The cluster is doing security profile (UTM) inspection over all the user traffic.
What statements are true regarding the sessions that the master unit is offloading to the slave unit for inspection? (Choose two.)

A: They are offloaded to the NP6 in the master unit.
B: They are not offloaded to the NP6 in the master unit.
C: They are offloaded to the NP6 in the slave unit.
D: They are not offloaded to the NP6 in the slave unit.

Correct Answer: BC

Success Secrets: How you can Pass Fortinet Certification Exams in first attempt