NSE4 Practice Questions & Answers • ExamPrepare

44 questions in this view

Page 1 of 8

Question 1

Refer to the exhibit.

Which two statements about the FortiGuard connection are true? (Choose two.)

FortiGate identified the FortiGuard Server using DNS lookup.
You can configure unreliable protocols to communicate with FortiGuard Server.
FortiGate is using the default port for FortiGuard communication.
The weight increases as the number of failed packets rises.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Refer to the exhibit.

You are configuring FortiAnalyzer on FortiGate.

Which step must you take to connect FortiAnalyzer to FortiGate?

Verify the FortiAnalyzer serial number.
Enable disk logging on FortiGate.
Configure UDP port 514 on FortiGate.
Authorize FortiGate on FortiAnalyzer.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Refer to the exhibits. Based on the current HA status, an administrator updates the override and priority parameters on HQ-NGFW-1 and HQ-NGFW-2 as shown

in the exhibits.

What would be the expected outcome in the HA cluster?

HQ-NGFW-2 will take over as the primary because it has the override enable setting and higher priority than HQ-NGFW-1.
HQ-NGFW-1 will remain the primary because HQ-NGFW-2 has lower priority.
The HA cluster will become out of sync because the override setting must match on all HA members.
HQ-NGFW-1 will synchronize the override disable setting with HQ-NGFW-2.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

What are two features of FortiGate FSSO agentless polling mode? (Choose two.)

FortiGate does not support workstation check .
FortiGate directs the collector agent to use a remote LDAP server.
FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
FortiGate uses the AD server as the collector agent.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Refer to the exhibits. You have implemented the application sensor and the corresponding firewall policy as shown

in the exhibits.

Which two factors can you observe from these configurations? (Choose two.)

YouTube search is allowed based on the Google Application and Filter override settings.
Facebook access is blocked based on the category filter settings.
YouTube access is blocked based on Excessive-Bandwidth Application and Filter override settings.
Facebook access is allowed but you cannot play Facebook videos based on Video/Audio category filter settings.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Refer to the exhibit.

A RADIUS server configuration is shown.

An administrator added a configuration for a new RADIUS server. While configuring, the administrator enabled Include in every user group.

What is the impact of enabling Include in every user group in a RADIUS configuration?

This option places all FortiGate users and groups required to authenticate into the RADIUS server, which, in this case, is FortiAuthenticator.
This option places all users into every RADIUS user group, including groups that are used for the LDAP server on FortiGate.
This option places the RADIUS server, and all users who can authenticate against that server, into every RADIUS group.
This option places the RADIUS server, and all users who can authenticate against that server, into every FortiGate user group.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.