Free NSE4 Questions for Fortinet Network Security Expert 4 Written Exam (400) NSE4 Exam as PDF & Practice Test Engine

Exam Code/Number: NSE4
Exam Name/Title: Fortinet Network Security Expert 4 Written Exam (400)
Certification Provider: Fortinet
Corresponding Certification: Network Security

Exam Questions: 303
Updated On: Oct 02, 2026

Question #1

Which protocols can you use for secure administrative access to a FortiGate? (Choose two)

A. SSH

B. NTLM

C. Telnet

D. HTTPS

Discussion 0

Correct Answer: A,D Vote an answer

Question #2

In a Crash log, what does a status of 0 indicate?

A. A process closed for any reason

B. Abnormal termination of a process

C. DHCP process crashed

D. Normal shutdown with no abnormalities

E. Scanunitd process crashed

Discussion 0

Correct Answer: D Vote an answer

Question #3

Which of the following statements best describe the main requirements for a traffic session to be offload eligible to an NP6 processor? (Choose three.)

A. It does NOT require proxy-based inspection.

B. Layer 4 protocol must be UDP, TCP, SCTP or ICMP.

C. It does NOT require flow-based inspection.

D. Session packets do NOT have an 802.1Q VLAN tag.

E. It is NOT multicast traffic.

Discussion 0

Correct Answer: A,B,C Vote an answer

Question #4

In the debug command output shown in the exhibit, which of the following best described the MAC address 00:09:0f:69:03:7e ?

A. It is one of the secondary MAC addresses of the port1 interface.

B. It is the primary MAC address of the port interface.

C. It is the MAC address of another network devices located in the same LAN segment as the FortiGate unit's port1 interface.

D. It is the HA virtual MAC address.

Discussion 0

Correct Answer: C Vote an answer

Question #5

Which two statements are true regarding firewall policy disclaimers? (Choose two.)

A. Users must accept the disclaimer to continue.

B. The disclaimer page is customizable.

C. They can only be applied to wireless interfaces.

D. They cannot be used in combination with user authentication.

Discussion 0

Correct Answer: A,B Vote an answer

Question #6

A FortiGate is configured with multiple VDOMs. An administrative account on the device has been assigned a Scope value of VDOM:root.
Which of the following settings will this administrator be able to configure? (Choose two.)

A. FortiGuard Distribution Network configuration.

B. DHCP servers

C. Firewall addresses

D. System hostname.

Discussion 0

Correct Answer: B,C Vote an answer

Question #7

Which of the following are benefits of using web caching? (Choose three.)

A. Reduce FortiGate CPU usage

B. Decrease bandwidth utilization

C. Reduce server load

D. Reduce FortiGate memory usage

E. Decrease traffic delay

Discussion 0

Correct Answer: B,C,E Vote an answer

Question #8

What is the FortiGate password recovery process?

A. Log in through the console port using the ''maintainer'' account within several seconds of physically power cycling the FortiGate.

B. Hold down the CTRL + Esc (Escape) keys during reboot, then reset the admin password.

C. Interrupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry.

D. Interrupt the boot sequence and restore a configuration file for which the password has been modified.

Discussion 0

Correct Answer: A Vote an answer

Question #9

Which of the following actions can be used to back up the keys and digital certificates in a
FortiGate device? (Choose two.)

A. Uploading a PKCS#12 file to a TFTP server

B. Uploading a PKCS#10 file to a USB drive

C. Manually uploading the certificate information to a Certificate authority (CA)

D. Taking a full backup of the FortiGate configuration

Discussion 0

Correct Answer: A,D Vote an answer

Question #10

Which of the following FSSO modes must be used for Novell eDirectory networks?

A. Agentless polling

B. LDAP agent

C. eDirectory agent

D. DC agent

Discussion 0

Correct Answer: C Vote an answer

Question #11

Of the following information, what can be recorded by a Data Leak Prevention sensor configured to do a summary archiving? (Choose three.)

A. Email body (for the case of SMTP traffic)

B. Recipient email address (for the case of SMTP traffic)

C. Sender email address (for the case of SMTP traffic)

D. Visited URL (for the case of HTTP traffic)

E. Attached file (for the case of SMTP traffic)

Discussion 0

Correct Answer: A,B,C Vote an answer

Question #12

Which of the following statements is true regarding the differences between route-based and policy-based IPsec VPNs? (Choose two.)

A. The firewall policies for policy-based are bidirectional. The firewall policies for route- based are unidirectional.

B. The action for firewall policies for route-based VPNs may be Accept or Deny, for policy- based VPNs it is Encrypt.

C. In policy-based VPNs the traffic crossing the tunnel must be routed to the virtual IPsec interface. In route-based, it does not.

D. Policy-based VPN uses an IPsec interface, route-based does not.

Discussion 0

Correct Answer: A,B Vote an answer

Question #13

Regarding the header and body sections in raw log messages, which statement is correct?

A. The header section layout is always the same regardless of the log type. The body section layout changes depending on the log type.

B. The header and body section layouts change depending on the log type.

C. Some log types include multiple body sections.

D. Some log types do not include a body section.

Discussion 0

Correct Answer: A Vote an answer

Free NSE4 Questions for Fortinet Network Security Expert 4 Written Exam (400) NSE4 Exam as PDF & Practice Test Engine

Download Free Fortinet NSE4 Demo