NSE 4 – FortiGate 7.0 Free Practice Exam Questions

66 real NSE 4 – FortiGate 7.0 exam questions with answers and AI explanations. Fortinet certification prep — page 2 of 7.

1. Question 19: What is the primary FortiGate election process when the HA override setting is disabled?
2. Question 21: Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)
3. Question 23: Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?
4. Question 24: Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?
5. Question 25: Which statement about video filtering on FortiGate is true?
6. Question 27: A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not suppor…
7. Question 28: An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only…
8. Question 30: Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)
9. Question 31: An administrator wants to configure timeouts for users. Regardless of the user's behavior, the timer should start as soon as the user authenticates and expire…
10. Question 32: Which scanning technique on FortiGate can be enabled only on the CLI?