Fortinet NSE 4 - FortiOS 6.4 Exam (NSE4_FGT) - Fortinet Actual Exam Questions
Last updated on May 02, 2026
Refer to the exhibit. The exhibit contains a network diagram, central SNAT policy, and IP pool configuration. The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IP address 10.0.1.254/24. A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1). Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied. Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?
10.200.1.149
10.200.1.1
10.200.1.49
10.200.1.99
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Which three statements about a flow-based antivirus profile are correct? (Choose three.)
IPS engine handles the process as a standalone.
FortiGate buffers the whole file but transmits to the client simultaneously.
If the virus is detected, the last packet is delivered to the client.
Optimized performance compared to proxy-based inspection.
Flow-based inspection uses a hybrid of scanning modes available in proxy-based inspection.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Refer to the exhibit. The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode. The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the Internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem. Which two statements are true? (Choose two.)
Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?
It limits the scanning of application traffic to the DNS protocol only.
It limits the scanning of application traffic to use parent signatures only.
It limits the scanning of application traffic to the browser-based technology category only.
It limits the scanning of application traffic to the application category only.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
How do you format the FortiGate flash disk?
Load a debug FortiOS image.
Load the hardware test (HQIP) image.
Execute the CLI command execute formatlogdisk.
Select the format boot device option from the BIOS menu.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.