NSE4 by Fortinet Valid Free Exam Practice Test

Question 1

Examine the exhibit below; then answer the question following it.

In this scenario. The FortiGate unit in Ottawa has the following routing table:
s*0.0.0.0/0 [10/0] via 172.20.170.254, port2
c172.20.167.0/24 is directly connected, port1
c172.20.170.0/24 is directly connected, port2
Sniffer tests show that packets sent from the source IP address 170.20.168.2 to the destination IP address 172.20.169.2 are being dropped by the FortiGate located in Ottawa.
Which of the following correctly describes the cause for the dropped packets?

A. The destination workstation 172.20.169.2 does NOT have the subnet 172.20.168.0/24 in its routing table. B. The subnet 172.20.169.0/24 is NOT in the Ottawa FortiGate's routing table. C. The reserve path forwarding check. D. The forward policy check.

Correct Answer: C

Question 2

Which define device identification? (Choose two.)

A. FortiClient can be used as an agent based device identification technique. B. You cannot combine source user and source device in the same firewall policy. C. Enabling a source device in a firewall policy enables device identification on the source interfaces of that policy. D. Device identification is enabled by default on all interfaces. E. Only agentless device identification techniques are supported.

Correct Answer: A,C

Question 3

Examine the exhibit; then answer the question below.

Which statement describes the green status indicators that appear next to the different
FortiGuard Distribution Network services as illustrated in the exhibit?

A. They indicate that updates are available and should be downloaded from the FortiGuard
Distribution Network to the FortiGate unit. B. They indicate that the FortiGate is in the process of downloading updates from the
FortiGuard Distribution Network. C. They indicate that the FortiGate is able to connect to the FortiGuard Distribution
Network. D. They indicate that the FortiGate has the latest updates available from the FortiGuard
Distribution Network.

Correct Answer: C

Question 4

Examine the following FortiGate web proxy configuration; then answer the question below:
config web-proxy explicit
set pac-file-server-status enable
set pac-file-server-port 8080
set pac-file-name wpad.dat
end
Assuming that the FortiGate proxy IP address is 10.10.1.1, which URL must an Internet browser use to download the PAC file?

A. https://10.10.1.1:8080 B. http://10.10.1.1:8080/wpad.dat C. http://10.10.1.1:8080/ D. https://10.10.1.1:8080/wpad.dat

Correct Answer: B

Question 5

What methods can be used to deliver the token code to a user that is configured to use two-factor authentication? (Choose three.)

A. Browser pop-up window. B. Code books. C. FortiToken. D. SMS phone message. E. Email.

Correct Answer: C,D,E

Question 6

Which of the following statements are true regarding the web filtering modes? (Choose two.)

A. Flow based mode offers more settings under the advanced configuration section of the
GUI. B. Proxy based mode allows for customizable block pages to display when sites are prevented. C. Proxy based mode offers higher throughput than flow-based mode. D. Proxy based mode requires more resources than flow-based.

Correct Answer: B,D

Question 7

Which of the following authentication methods are supported in an IPsec phase 1?
(Choose two.)

A. CA root digital certificates B. Asymmetric Keys C. Pre-shared keys D. RSA signature

Correct Answer: C,D

Question 8

Which statement best describes the objective of the SYN proxy feature available in SP processors?

A. Collect statistics regarding traffic sessions B. Analyze the SYN packet to decide if the new session can be offloaded to the SP processor C. Accelerate the TCP 3-way handshake D. Protect against SYN flood attacks.

Correct Answer: D

Question 9

Which of the following items is NOT a packet characteristic matched by a firewall service object?

A. ICMP type and code B. TCP sequence number C. TCP/UDP source and destination ports D. IP protocol number

Correct Answer: B

Fortinet Network Security Expert 4 Written Exam (400) - NSE4 Exam Practice Test