Which elements are typically defined in a FortiOS firewall policy?

Logging, antivirus, and web filter profiles

Interface, VLAN ID, and routing protocol

User, group, and authentication method

Source, destination, schedule, and service

How can traffic logging be enabled on a FortiOS firewall policy?

By setting the policy action to 'deny'

By enabling 'Log All Sessions' in the policy's logging options

By configuring a syslog server only

By enabling the 'Logging' toggle in the global settings

Which use case is best suited for proxy-based inspection?

Simple allow/deny policies without security profiles

Deep inspection of SSL-encrypted traffic for maximum security

Real-time packet filtering for VoIP traffic

High-throughput data transfer with minimal latency

What is the primary purpose of a FortiOS firewall policy?

To define the routing table for the FortiGate

To manage the firmware version of the FortiGate

To configure the IP address of the FortiGate interface

To control traffic by allowing or denying it based on defined criteria

An organization needs to inspect SMTP traffic for spam and viruses, and they require the ability to buffer the entire email message before forwarding it. Which inspection mode should the administrator use for the SMTP policy?

Proxy-based inspection with SSL inspection

Flow-based inspection with SSL inspection

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 2Objective 1

Configure Firewall Policies NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 5)

Part of the Firewall Policies and Authentication domain, which accounts for 20-25% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–15 in this domain), expect 2–4 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

10concepts

20-25%of the exam

Questions 21–25

21foundation · easy
Which elements are typically defined in a FortiOS firewall policy?
Select an answer first
22foundation · easy
How can traffic logging be enabled on a FortiOS firewall policy?
Select an answer first
23foundation · easy
Which use case is best suited for proxy-based inspection?
Select an answer first
24foundation · easy
What is the primary purpose of a FortiOS firewall policy?
Select an answer first
25application · medium
An organization needs to inspect SMTP traffic for spam and viruses, and they require the ability to buffer the entire email message before forwarding it. Which inspection mode should the administrator use for the SMTP policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.