FORTINET NSE4 ACTUAL EXAM QUESTIONS WITH
WELL VERIFIED ANSWERS
FortiGuard gives package updates for which features? - ✔✔Antivirus and IPS
FortiGuard gives live queries for which features? - ✔✔Web and Email Gateway
What is the most common mode for a FortiGate? - ✔✔NAT
What mode other than NAT can a FortiGate be in? - ✔✔Transparent
Will a soft reboot enable you to reset admin password if you were to forget it? -
✔✔No, only a hard reboot will work.
If you disable maintainer mode and then lose your admin password, are you ****ed? -
✔✔Yupp, totally ****ed.
Can you view reports in the CLI? - ✔✔No.
Can you use diagnostic commands in the GUI? - ✔✔No.
What is FortiExplorer used for? - ✔✔Used via mobile device to help deploy your
FortiGate. Configures network addresses and can be integrated into your network to
configure other Fortinet appliances.
, Do you have to create admin accounts in the management console? - ✔✔No, you can
also do it on a remote authentication server.
What is best practice when configuring permissions for certain admins? - ✔✔Do not
give everyone all the permissions. Only give certain ones to certain people. That way, if
someone is compromised you aren't totally ****ed.
What are Virtual Domains? - ✔✔A way of subdividing resources and configurations
on a single FortiGate.
What do you need to do to enable MFA on your FortiGate? - ✔✔Configure it to send
emails or texts via a server.
If you leave an IP as 0.0.0.0, what does that mean? - ✔✔Any IP. If you set 0.0.0.0 as a
trusted IP, then any IP can get through which is no bueno.
What are some perks to restricting concurrent sessions? - ✔✔You do not accidentally
override settings. Prevents conflicts with multiple people editing the same thing at the
same time.
What perk do you get from shutting down unused ports? - ✔✔People can't just plug
into your firewall and do whatever they want. If the port is not on, then they would be
SOL.
What must every interface that handles traffic have? - ✔✔An IP Address
Does FortiGate have a built in DHCP server? - ✔✔Yes.
WELL VERIFIED ANSWERS
FortiGuard gives package updates for which features? - ✔✔Antivirus and IPS
FortiGuard gives live queries for which features? - ✔✔Web and Email Gateway
What is the most common mode for a FortiGate? - ✔✔NAT
What mode other than NAT can a FortiGate be in? - ✔✔Transparent
Will a soft reboot enable you to reset admin password if you were to forget it? -
✔✔No, only a hard reboot will work.
If you disable maintainer mode and then lose your admin password, are you ****ed? -
✔✔Yupp, totally ****ed.
Can you view reports in the CLI? - ✔✔No.
Can you use diagnostic commands in the GUI? - ✔✔No.
What is FortiExplorer used for? - ✔✔Used via mobile device to help deploy your
FortiGate. Configures network addresses and can be integrated into your network to
configure other Fortinet appliances.
, Do you have to create admin accounts in the management console? - ✔✔No, you can
also do it on a remote authentication server.
What is best practice when configuring permissions for certain admins? - ✔✔Do not
give everyone all the permissions. Only give certain ones to certain people. That way, if
someone is compromised you aren't totally ****ed.
What are Virtual Domains? - ✔✔A way of subdividing resources and configurations
on a single FortiGate.
What do you need to do to enable MFA on your FortiGate? - ✔✔Configure it to send
emails or texts via a server.
If you leave an IP as 0.0.0.0, what does that mean? - ✔✔Any IP. If you set 0.0.0.0 as a
trusted IP, then any IP can get through which is no bueno.
What are some perks to restricting concurrent sessions? - ✔✔You do not accidentally
override settings. Prevents conflicts with multiple people editing the same thing at the
same time.
What perk do you get from shutting down unused ports? - ✔✔People can't just plug
into your firewall and do whatever they want. If the port is not on, then they would be
SOL.
What must every interface that handles traffic have? - ✔✔An IP Address
Does FortiGate have a built in DHCP server? - ✔✔Yes.
