NSE 4 – FortiGate 6.0 Free Practice Exam Questions

88 real NSE 4 – FortiGate 6.0 exam questions with answers and AI explanations. Fortinet certification prep — page 2 of 9.

1. Question 17: NGFW mode allows policy-based configured for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspect…
2. Question 18: Which configuration objects can be selected for the Source field of a firewall policy? (Choose two.)
3. Question 19: Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)
4. Question 20: When using SD-WAN, how do you configure the next-hop gateway address for a member interface so that FortiGate can forward Internet traffic?
5. Question 21: During the digital verification process, comparing the original and fresh hash results satisfies which security requirement?
6. Question 22: Which statements about HA for FortiGate devices are true? (Choose two.)
7. Question 23: Which of the following features is supported by web filter in flow-based inspection mode with NGFW mode set to profile-based?
8. Question 25: Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)
9. Question 30: What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)
10. Question 32: By default, when logging to disk, when does FortiGate delete logs?