NSE4 Free Practice Test

How do application control signatures update on a FortiGate device?

1. A. Through FortiGuard updates.
2. B. Upgrade the FortiOS firmware to a newer release.
3. C. By running the Application Control auto-learning feature.
4. D. Signatures are hard coded to the device and cannot be updated.

Correct Answer: A

Which of the following actions can be used to back up the keys and digital certificates in a FortiGate device? (Choose two.)

1. A. Taking a full backup of the FortiGate configuration
2. B. Uploading a PKCS#10 file to a USB drive
3. C. Manually uploading the certificate information to a Certificate authority (CA)
4. D. Uploading a PKCS#12 file to a TFTP server

Correct Answer: AD

Which is true about incoming and outgoing interfaces in firewall policies?

1. A. A physical interface may not be used.
2. B. A zone may not be used.
3. C. Multiple interfaces may not be used for both incoming and outgoing.
4. D. Source and destination interfaces are mandatory.

Correct Answer: D

A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profiles applied to this policy.
Exhibit A
< ><>>< ><>

1. A. The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected.
2. B. The FortiGate unit will reject the infected email and the sender will receive a failed delivery message.
3. C. The FortiGate unit will remove the infected file and add a replacement messag
4. D. Both sender and recipient are notified that the infected file has been removed.
5. E. The FortiGate unit will reject the infected email and notify the sender.

Correct Answer: B

Which Fortinet products & features could be considered part of a comprehensive solution to monitor and prevent the leakage of sensitive data?

1. A. Archive non-compliant outgoing e-mails using FortiMail.
2. B. Restrict unofficial methods of transferring files such as P2P using Application Control lists on a FortiGate.
3. C. Monitor database activity using FortiAnalyzer.
4. D. Apply a DLP sensor to a firewall policy.
5. E. Configure FortiClient to prevent files flagged as sensitive from being copied to a USB disk.

Correct Answer: ABD