What is the purpose of session logging in FortiOS firewall policies?

To record information about each session that matches the policy

To block all traffic that matches the policy

To automatically create new policies

To increase the performance of the firewall

Which inspection mode is generally known for lower latency and higher throughput?

Both modes have identical performance

Neither mode is optimized for performance

What is a key difference between flow-based and proxy-based inspection modes in FortiOS?

Flow-based inspection is used only for logging, while proxy-based is for security

Flow-based inspection processes packets in real time, while proxy-based inspection buffers and reassembles traffic

Flow-based inspection is only for IPv6 traffic, while proxy-based is for IPv4

Flow-based inspection requires a separate hardware module, while proxy-based is built-in

An organization runs a high-volume web server that handles thousands of concurrent HTTPS connections. They need to inspect SSL/TLS traffic for malware and enforce application control, but they are concerned about latency and CPU usage. Which inspection mode should the administrator choose for the firewall policy?

Flow-based inspection with SSL inspection enabled

Proxy-based inspection with SSL inspection enabled

Flow-based inspection without SSL inspection

Proxy-based inspection without SSL inspection

Why is the order of firewall policies important in FortiOS?

Because policies are evaluated in random order

Because the first matching policy is applied and subsequent policies are not evaluated

Because policies must be sorted alphabetically

Because the last matching policy takes precedence

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 2Objective 1

Configure Firewall Policies NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 3)

Part of the Firewall Policies and Authentication domain, which accounts for 20-25% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–15 in this domain), expect 2–4 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

10concepts

20-25%of the exam

Questions 11–15

11foundation · easy
What is the purpose of session logging in FortiOS firewall policies?
Select an answer first
12foundation · easy
Which inspection mode is generally known for lower latency and higher throughput?
Select an answer first
13foundation · easy
What is a key difference between flow-based and proxy-based inspection modes in FortiOS?
Select an answer first
14application · medium
An organization runs a high-volume web server that handles thousands of concurrent HTTPS connections. They need to inspect SSL/TLS traffic for malware and enforce application control, but they are concerned about latency and CPU usage. Which inspection mode should the administrator choose for the firewall policy?
Select an answer first
15foundation · easy
Why is the order of firewall policies important in FortiOS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.