Official Bank 0/87

Fortinet NSE 4 – FortiOS 7.6 (NSE4_FGT-7.6) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
87 Total Questions
1
Question
FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)
Select 2
Options
A Both interfaces must have the interface role assigned.
B Both interfaces must have IP addresses assigned.
C Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.
D Both interfaces must have directly connected routes on the routing table.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two answers)
Select 2
Options
A If SD-WAN is disabled, you can configure the parameter v4-ecmp-mode to volume-based.
B If SD-WAN is disabled, you configure the load balancing algorithm in config system settings.
C If SD-WAN is enabled, you control the load balancing algorithm with the parameter load-balance-
mode.
D If SD-WAN is enabled, you can configure routes with unequal distance and priority values to be
part of ECMP.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Refer to the exhibit.

Exhibit

The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that their GUI sessions do not disconnect too early during inactivity. What must the administrator configure to answer this specific request from the NOC team? (Choose one answer)
Options
A Increase the offline value of the Override Idle Timeout parameter in the NOC_Access admin profile.
B Increase the admintimeout value under config system accprofile NOC_Access.
C Move NOC_Access to the top of the list to ensure all profile settings take effect.
D Ensure that all NOC_Access users are assigned the super_admin role to guarantee access.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Refer to the exhibit.

Exhibit

An SD-WAN zone configuration on the FortiGate GUI is shown. Based on the exhibit, which statement is true?
Options
A The virtual-wan-link and overlay zones can be deleted
B port2 and port3 are not assigned to a zone.
C The Underlay zone contains no member.
D The Underlay zone is the zone by default.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Refer to the exhibit.

Exhibit

An intrusion prevention system (IPS) profile signature setting is shown. What can you conclude about the signature when adding the FTP.Login.Failed signature to the IPS Sensor profile?
Options
A FortiGate allows this low severity signature packet and creates a log.
B The signature setting includes a group of other signatures.
C The signature setting uses a custom rating threshold.
D FortiGate stores a local copy of the packet that matches the signature.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.