Online Access Free NSE4 Practice Test

Examine the exhibit; then answer the question below.

Which statement describes the green status indicators that appear next to the different
FortiGuard Distribution Network services as illustrated in the exhibit?

• A.They indicate that the FortiGate has the latest updates available from the FortiGuard
  Distribution Network.
• B.They indicate that updates are available and should be downloaded from the FortiGuard
  Distribution Network to the FortiGate unit.
• C.They indicate that the FortiGate is able to connect to the FortiGuard Distribution
  Network.
• D.They indicate that the FortiGate is in the process of downloading updates from the
  FortiGuard Distribution Network.

What are two requirements for DC-agent mode FSSO to work properly in a Windows AD environment? (Choose two.)

• A.The collector agent must be installed in one of the Windows domain controllers
• B.DNS server must properly resolve all workstation names
• C.The remote registry service must be running in all workstations
• D.A same user cannot be logged in into two different workstations at the same time

Review the IPsec phase 1 configuration in the exhibit; then answer the question below.

Which statements are correct regarding this configuration? (Choose two.)

• A.The local IPsec interface address is 10.200.3.1
• B.The local gateway IP is 10.200.3.1
• C.The remote gateway address is 10.200.3.1
• D.The local gateway IP is the address assigned to port1

Review to the network topology in the exhibit.

The workstation, 172.16.1.1/24, connects to port2 of the FortiGate device, and the ISP router, 172.16.1.2, connects to port1. Without changing IP addressing, which configuration changes are required to properly forward users traffic to the Internet? (Choose two)

• A.At least one firewall policy from port2 to port1 to allow outgoing traffic.
• B.A default route configured in the FortiGuard devices pointing to the ISP's router.
• C.The FortiGate devices configured in transparent mode.
• D.Static or dynamic IP addresses in both ForitGate interfaces port1 and port2.

What action does an IPsec Gateway take with the user traffic routed to an IPsec VPN when it does not match any phase 2 quick mode selector?

• A.Traffic is dropped
• B.Traffic is routed unencrypted to the interface where the IPsec VPN is terminating.
• C.Traffic is routed across the default phase 2.
• D.Traffic is routed to the next available route in the routing table.