We're so confident of our products that we provide no hassle product exchange.
Fortinet NSE4 Exam Overview:
| Certification Vendor: | Fortinet |
|---|---|
| Exam Name: | Network Security Expert 4 Written Exam (400) |
| Exam Number: | NSE4_FGT-400 |
| Exam Duration: | 120 minutes |
| Passing Score: | Approximately 60% - 70% (varies by exam version) |
| Available Languages: | English |
| Exam Format: | Multiple choice, Multiple select |
| Certificate Validity Period: | 2 years |
| Real Exam Qty: | 60 - 70 (varies by exam version) |
| Exam Price: | USD 200 (may vary by region) |
| Related Certifications: | Fortinet Certified Solution Specialist Fortinet Certified Professional Network Security NSE 3 Network Security Associate |
| Recommended Training: | Fortinet NSE 4 Study Resources FortiGate Administrator Course |
| Exam Registration: | Pearson VUE Fortinet Exams Fortinet Training Institute Exam Registration |
| Sample Questions: | Fortinet NSE4 Sample Questions |
| Exam Way: | Online proctored or authorized testing center (Pearson VUE) |
| Pre Condition: | Recommended: NSE 3 or equivalent networking/security knowledge. No strict prerequisite required. |
| Official Syllabus URL: | https://www.fortinet.com/training-certification |
Fortinet NSE4 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| VPN Technologies | - SSL VPN setup and troubleshooting - IPsec VPN configuration |
| Network Security Fundamentals | - Fortinet Security Fabric overview - Security concepts and threat landscape |
| Network Design and Routing | - SD-WAN fundamentals - NAT configuration - Static and dynamic routing |
| Security Services | - Web filtering and DNS filtering - SSL inspection and certificate management - Antivirus, IPS, and application control |
| High Availability and Monitoring | - Logging, monitoring, and reporting - HA clustering concepts - Troubleshooting tools and diagnostics |
| FortiGate Administration | - Firewall policies and objects - User authentication and identity-based policies - Initial configuration and system settings |
Fortinet Network Security Expert 4 Written Exam (400) Sample Questions:
Question 1
Regarding tunnel-mode SSL VPN, which three statements are correct? (Choose three.)
A. It requires the installation of a VPN client.
B. It does not support traffic from third-party network applications.
C. An SSL VPN IP address is dynamically assigned to the client by the FortiGate unit.
D. Split tunneling is supported.
E. It requires the use of an Internet browser.
Question 2
Which of the following statements are correct regarding logging to memory on a FortiGate unit?
A. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.
B. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.
C. When the system has reached its capacity for log messages, the FortiGate unit will stop logging to memory.
D. None of the above.
Question 3
A FortiGate is configured with three virtual domains (VDOMs). Which of the following statements is correct regarding multiple VDOMs?
A. The FortiGate must be a model 1000 or above to support multiple VDOMs.
B. A license has to be purchased and applied to the FortiGate before VDOM mode could be enabled.
C. The FortiGate supports any combination of VDOMs in NAT/Route and transparent modes.
D. Changing the operational mode of a VDOM requires a reboot of the FortiGate.
Question 4
Which statements are correct regarding virtual domains (VDOMs)? (Choose two)
A. VDOMs divide a single FortiGate unit into two or more virtual units that each have dedicated memory and CPUs.
B. Different time zones can be configured in each VDOM.
C. VDOMs share firmware versions, as well as antivirus and IPS databases.
D. A management VDOM handles SNMP, logging, alert email and FDN-based updates.
Question 5
Which statements regarding banned words are correct? (Choose two.)
A. Content is automatically blocked if a single instance of a banned word appears.
B. The FortiGate updates banned words on a periodic basis.
C. The FortiGate can scan web pages and email messages for instances of banned words.
D. Banned words can be expressed as simple text, wildcards and regular expressions.
Solutions:
| Question 1 Answer: A,C,D | Question 2 Answer: A,B | Question 3 Answer: C | Question 4 Answer: C,D | Question 5 Answer: C,D |
By Xanthe
