Online Access Free NSE4 Exam Questions

Which of the following IPsec configuration modes can be used for implementing L2TP- over-IPSec VPNs?

• A.Policy-based IPsec only.
• B.Both policy-based and route-based VPN.
• C.L2TP-over-IPSec is not supported by FortiGate devices.
• D.Route-based IPsec only.

To which remote device can the FortiGate send logs? (Choose three.)

• A.Memory
• B.Hard drive
• C.FortiAnalyzer
• D.Syslog
• E.FortiCloud

What is valid reason for using session based authentication instead of IP based authentication in a FortiGate web proxy solution?

• A.Proxy users are authenticated via FSSO.
• B.There are multiple users sharing the same IP address.
• C.Proxy users are authenticated via RADIUS.
• D.Users are required to manually enter their credentials each time they connect to a different web site.

A FortiGate is configured to receive push updates from the FortiGuard Distribution
Network, however, they are not being received.
Which is one reason for this problem?

• A.FortiGuard scheduled updates are enabled in the FortiGate configuration.
• B.The FortiGate is connected to multiple ISPs.
• C.The external facing interface of the FortiGate is configured to get the IP address from a
  DHCP server.
• D.The FortiGate is in Transparent mode.

Which of the following statements are correct regarding a master HA unit? (Choose two)

• A.There should be only one master unit is each HA virtual cluster.
• B.Only the master has a reserved management HA interface.
• C.Heartbeat interfaces are not required on a master unit.
• D.The Master synchronizes cluster configuration with slaves.