NSE4 Exam - Free Fortinet Questions and Answers

Question #11 (Topic: )

Which commands are appropriate for investigating high CPU? (Choose two.)

A. diag sys top B. diag hardware sysinfo mem C. diag debug flow D. get system performance status

Answer: A,D

Question #12 (Topic: )

Which of the following statements describes the objectives of the gratuitous ARP packets
sent by an HA cluster?

A. To synchronize the ARp tables in all the FortiGate Unis that are part of the HA cluster. B. To notify the network switches that a new HA master unit has been elected. C. To notify the master unit that the slave devices are still up and alive. D. To notify the master unit about the physical MAC addresses of the slave units.

Answer: B

Question #13 (Topic: )

Which are outputs for the command ‘diagnose hardware deviceinfo nic’? (Choose two.)

A. ARP cache B. Physical MAC address C. Errors and collisions D. Listening TCP ports

Answer: B,C

Question #14 (Topic: )

Which of the following statements are correct regarding SSL VPN Web-only mode?
(Choose two.)

A. It can only be used to connect to web services. B. IP traffic is encapsulated over HTTPS. C. Access to internal network resources is possible from the SSL VPN portal. D. The standalone FortiClient SSL VPN client CANNOT be used to establish a Web-only SSL VPN. E. It is not possible to connect to SSH servers through the VPN.

Answer: B,C

Question #15 (Topic: )

How many packets are interchanged between both IPSec ends during the negotiation of a
main-mode phase 1?

A. 5 B. 3 C. 2 D. 6

Answer: D

Fortinet NSE4 - Fortinet Network Security Expert 4 Exam