Fortinet NSE4 Online Practice Questions and Exam Preparation

Fortinet NSE4 Online Questions & Answers

• Question 111:

  Alert emails enable the FortiGate unit to send email notifications to an email address upon detection of a pre-defined event type. Which of the following are some of the available event types in Web Config?

  A. Intrusion detected.
  B. Successful firewall authentication.
  C. Oversized file detected.
  D. DHCP address assigned.
  E. FortiGuard Web Filtering rating error detected.
  A. Intrusion detected.

• Question 112:

  Which of the following statements best describes what a Certificate Signing Request (CSR) is?

  A. A message sent by the Certificate Authority (CA) that contains a signed digital certificate.
  B. An enquiry submitted to a Certificate Authority (CA) to request a root CA certificate
  C. An enquiry submitted to a Certificate Authority (CA) to request a signed digital certificate
  D. An enquiry submitted to a Certificate Authority (CA) to request a Certificate Revocation List (CRL)
  B. An enquiry submitted to a Certificate Authority (CA) to request a root CA certificate

• Question 113:

  Which of the following statements are correct about the HA command diagnose sys ha reset-uptime? (Choose two.)

  A. The device this command is executed on is likely to switch from master to slave status if override is disabled.
  B. The device this command executed on is likely to switch from master to slave status if override is enabled.
  C. The command has no impact on the HA algorithm.
  D. This commands resets the uptime variable used in the HA algorithm so it may cause a new master to become elected.
  A. The device this command is executed on is likely to switch from master to slave status if override is disabled.
  D. This commands resets the uptime variable used in the HA algorithm so it may cause a new master to become elected.

• Question 114:

  Which is true of FortiGate's session table?

  A. NAT/PAT is shown in the central NAT table, not the session table.
  B. It shows TCP connection states.
  C. It shows IP, SSL, and HTTP sessions.
  D. It does not show UDP or ICMP connection state codes, because those protocols are connectionless.
  B. It shows TCP connection states.

• Question 115:

  Which statement best describes the objective of the SYN proxy feature available in SP processors?

  A. Accelerate the TCP 3-way handshake
  B. Collect statistics regarding traffic sessions
  C. Analyze the SYN packet to decide if the new session can be offloaded to the SP processor
  D. Protect against SYN flood attacks.
  D. Protect against SYN flood attacks.

• Question 116:

  What is the maximum number of different virus databases a FortiGate can have?

  A. 5
  B. 2
  C. 3
  D. 4
  B. 2

• Question 117:

  What are the requirements for a HA cluster to maintain TCP connections after device or link failover? (Choose two.)

  A. Enable session pick-up.
  B. Enable override.
  C. Connections must be UDP or ICMP.
  D. Connections must not be handled by a proxy.
  A. Enable session pick-up.
  D. Connections must not be handled by a proxy.

• Question 118:

  What log type would indicate whether a VPN is going up or down?

  A. Event log
  B. Security log
  C. Forward log
  D. Syslog
  A. Event log

• Question 119:

  In a FSSO agent mode solution, how does the FSSO collector agent learn each IP address?

  A. The DC agents get each user IP address from the event logs and forward that information to the collector agent
  B. The collector agent does not know, and does not need, each user IP address. Only workstation names are known by the collector agent.
  C. The collector agent frequently polls the AD domain controllers to get each user IP address.
  D. The DC agent learns the workstation name from the event logs and DNS is then used to translate those names to the respective IP addresses.
  D. The DC agent learns the workstation name from the event logs and DNS is then used to translate those names to the respective IP addresses.

• Question 120:

  Which of the following are possible actions for FortiGuard web category filtering? (Choose three.)

  A. Allow
  B. Block
  C. Exempt
  D. Warning
  E. Shape
  A. Allow
  B. Block
  D. Warning