NSE4 Free Practice Test

What methods can be used to access the FortiGate CLI? (Choose two.)

1. A. Using SNMP.
2. B. A direct connection to the serial console port.
3. C. Using the CLI console widget in the GUI.
4. D. Using RCP.

Correct Answer: BC

Which of the following statements are correct regarding logging to memory on a FortiGate unit?

1. A. When the system has reached its capacity for log messages, the FortiGate unit will stop logging to memory.
2. B. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.
3. C. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.
4. D. None of the above.

Correct Answer: BC

Which is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying a FortiGate unit?

1. A. MIB-based report uploads.
2. B. SNMP access limited by access lists.
3. C. Packet encryption.
4. D. Running SNMP service on a non-standard port is possible.

Correct Answer: C

Examine the static route configuration shown below; then answer the question following it.
config router static edit 1
set dst 172.20.1.0 255.255.255.0
set device port1
set gateway 172.11.12.1
set distance 10
set weight 5 next
edit 2
set dst 172.20.1.0 255.255.255.0
set blackhole enable set distance 5
set weight 10 next
end
Which of the following statements correctly describes the static routing configuration provided? (Choose two.)

1. A. All traffic to 172.20.1.0/24 is dropped by the FortiGate.
2. B. As long as port1 is up, all traffic to 172.20.1.0/24 is routed by the static route number 1. if the interface port1 is down, the traffic is routed using the blackhole route.
3. C. The FortiGate unit does NOT create a session entry in the session table when the traffic is being routed by the blackhole route.
4. D. The FortiGate unit creates a session entry in the session table when the traffic is being routed by the blackhole route.

Correct Answer: AC

Which statements correctly describe transparent mode operation? (Choose three.)

1. A. The FortiGate acts as transparent bridge and forwards traffic at Layer-2.
2. B. Ethernet packets are forwarded based on destination MAC addresses, NOT IP addresses.
3. C. The transparent FortiGate is clearly visible to network hosts in an IP trace route.
4. D. Permits inline traffic inspection and firewalling without changing the IP scheme of the network.
5. E. All interfaces of the transparent mode FortiGate device most be on different IP subnets.

Correct Answer: ABD