NSE4 Free Practice Test

Examine the exhibit; then answer the question below.
<>

1. A. They indicate that the FortiGate has the latest updates available from the FortiGuard Distribution Network.
2. B. They indicate that updates are available and should be downloaded from the FortiGuard Distribution Network to the FortiGate unit.
3. C. They indicate that the FortiGate is in the process of downloading updates from the FortiGuard Distribution Network.
4. D. They indicate that the FortiGate is able to connect to the FortiGuard Distribution Network.

Correct Answer: D

Review to the network topology in the exhibit.
<>

1. A. At least one firewall policy from port2 to port1 to allow outgoing traffic.
2. B. A default route configured in the FortiGuard devices pointing to the ISP\'s router.
3. C. Static or dynamic IP addresses in both ForitGate interfaces port1 and port2.
4. D. The FortiGate devices configured in transparent mode.

Correct Answer: AD

Which statement best describes what a Fortinet System on a Chip (SoC) is?

1. A. Low-power chip that provides general purpose processing power
2. B. Chip that combines general purpose processing power with Fortinet’s custom ASIC technology
3. C. Light-version chip (with fewer features) of an SP processor
4. D. Light-version chip (with fewer features) of a CP processor

Correct Answer: B

Your Linux email server runs on a non-standard port number, port 2525. Which statement is true?

1. A. IPS cannot scan that traffic for SMTP anomalies because of the non-standard port numbe
2. B. You must reconfigured the server to run on port 2.
3. C. To apply IPS to traffic to that server, you must configured FortiGate SMTP proxy to listen on port 2525
4. D. IPS will apply all SMTP signatures, regardless of whether they apply to clients or servers.
5. E. Protocol decoders automatically detect SMTP and scan for matches with appropriate IPS signature.

Correct Answer: B

Which of the following statements are correct concerning the FortiGate session life support protocol? (Choose two)

1. A. By default, UDP sessions are not synchronized.
2. B. Up to four FortiGate devices in standalone mode are supported.
3. C. only the master unit handles the traffic.
4. D. Allows per-VDOM session synchronization.

Correct Answer: AD