NSE4 Security Lesson 11 Security Fabric Exam Actual Questions and Answers 2026.docx

NSE4 Security Lesson 11: Security
Fabric Exam Actual Questions and
Answers 2026
IoC -
correct answer ✅Indicators of Compromise


The Security Fabric Core is made up of which devices? -
correct answer ✅At least... Two FortiGates and One Analyzer


Setup (4) -
correct answer ✅1. Root
2. Downstream
3. Authorize
4. Sync


Split-Task Vdom mode creates... -
correct answer ✅A management VDOM (no traffic just manages)
&
A traffic (root) VDOM


What two types of Device ID are available in the security fabric? -
correct answer ✅With Agent (FortiCient) and Agentless/Without
Agent (direct connected)

, NSE4 Security Lesson 11: Security
Fabric Exam Actual Questions and
Answers 2026

Agentless ID uses _____ from the _______ to determine ID? -
correct answer ✅Traffic from the device


Agentless device ID requires a _____ _______ network segment
with no _____ ______ between? -
correct answer ✅Directly connected network segment with no
Layer 3-router device between.


What is the agent-based device ID agent called? -
correct answer ✅FortiClient


Agent-based device ID uses FortiClient which sends info to the FGT
and the device is tracked by its? -
correct answer ✅UID - Unique FortiClient User ID


What feature/service is required for FortiClient to work? -
correct answer ✅FortiTelemetry


Seven types of device profiling for Agentless device ID? -
correct answer ✅Http,