Logo ExamsQA
Exit
Official Bank 0/165

Fortinet NSE 4 – FortiOS 6.4 Exam (NSE4_FGT-6.4) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
165 Total Questions
1
Question
Which two statements ate true about the Security Fabric rating? (Choose two.)
Select 2
Options
A The Security Fabric rating is a free service that comes bundled with alt FortiGate devices.
B It provides executive summaries of the four largest areas of security focus.
C Many of the security issues can be fixed immediately by click ng Apply where available.
D The Security Fabric rating must be run on the root FortiGate device in the Security Fabric.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Examine this PAC file configuration.

Exhibit

Which of the following statements are true? (Choose two.)
Select 2
Options
A Any web request fortinet.com is allowed to bypass the proxy.
B Browsers can be configured to retrieve this PAC file from the FortiGate.
C Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
D All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)
Select 2
Options
A Learn
B Exempt
C Warning
D Allow
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)
Select 2
Options
A The primary device in the cluster is always assigned IP address 169.254.0.1.
B Heartbeat interfaces have virtual IP addresses that are manually assigned.
C A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.
D Virtual IP addresses are used to distinguish between cluster members.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
An administrator has configured the following settings:

Exhibit

What are the two results of this configuration? (Choose two.)
Select 2
Options
A The number of logs generated by denied traffic is reduced.
B Device detection on all interfaces is enforced for 30 minutes.
C Denied users are blocked for 30 minutes.
D A session for denied traffic is created.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.