NSE4 Free Practice Test

A FortiGate is operating in NAT/Route mode and configured with two virtual LAN (VLAN) sub-interfaces added to the same physical interface.
Which one of the following statements is correct regarding the VLAN IDs in this scenario?

1. A. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.
2. B. The two VLAN sub-interfaces must have different VLAN IDs.
3. C. The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs.
4. D. The two VLAN sub-interfaces can have the same VLAN ID if they are connected to different L2 IEEE 802.1Q compliant switches.

Correct Answer: B

A FortiGate unit operating in NAT/route mode and configured with two sub-interface on the same physical interface. Which of the following statement is correct regarding the VLAN IDs in this scenario?

1. A. The two VLAN sub-interfaces can have the same VLAN IDs only if they have IP addresses in different subnets.
2. B. The two VLAN sub-interfaces must have different VLAN IDs.
3. C. The two VLAN sub-interfaces can have VLAN ID only if they belong to different VDOMs.
4. D. The two VLAN sub-interfaces can have the same VLAN if they are connected to different L2 IEEE 802.1Q complaint switches.

Correct Answer: B

Which statement best describes what SSL.root is?

1. A. The name of the virtual network adapter required in each user\'s PC for SSL VPN Tunnel mode.
2. B. The name of a virtual interface in the root VDOM where all the SSL VPN user traffic comes from.
3. C. A Firewall Address object that contains the IP addresses assigned to SSL VPN users.
4. D. The virtual interface in the root VDOM that the remote SSL VPN tunnels connect to.

Correct Answer: B

Which of the following statements must be true for a digital certificate to be valid? (Choose two.)

1. A. It must be signed by a “trusted” CA
2. B. It must be listed as valid in a Certificate Revocation List (CRL)
3. C. The CA field must be “TRUE”
4. D. It must be still within its validity period

Correct Answer: AD

Examine the exhibit; then answer the question below.
<>>>>>>>>>>>

1. A. The subnet 172.20.1.0/24 is overlapped with the subnet of one static route that is already in the routing table (172.20.0.0/16), so, we need to enable allow-subnet-overlap first.
2. B. The \'gateway\' IP address is NOT in the same subnet as the IP address of port1.
3. C. The priority is 0, which means that the route will remain inactive.
4. D. The static route configuration is missing the distance setting.

Correct Answer: B