A user reports a certificate error when accessing an HTTPS website through the FortiGate. The error says the certificate is not trusted. What is the most likely cause?

The website's certificate has expired

The FortiGate is blocking the website

The FortiGate's CA certificate is not installed on the user's computer

A company wants to enforce application control on HTTPS traffic to block social media applications. They have enabled full SSL inspection. What must be done to ensure application control can identify the applications?

Configure a web filter to block social media domains.

Enable deep packet inspection on the FortiGate.

Install the FortiGate's CA certificate on all endpoints.

Apply an application control profile to the firewall policy that handles the HTTPS traffic.

Which FortiGate feature is used to inspect SSH traffic for policy enforcement?

Intrusion Prevention System (IPS) profile

What is the main security concern that SSH inspection on FortiGate is designed to address?

Detecting and controlling the use of SSH tunnels to bypass security policies

Encrypting all SSH traffic to protect it from eavesdropping

Blocking all SSH connections to external servers

Preventing unauthorized users from accessing the FortiGate's management interface

An administrator notices that some users are using SSH tunnels to bypass the firewall and access prohibited websites. The administrator wants to inspect SSH traffic to detect and block such tunneling. What should the administrator configure on the FortiGate?

Enable full SSL inspection on the firewall policy that handles outbound HTTPS traffic.

Enable SSH inspection on the firewall policy that handles outbound SSH traffic.

Create a firewall policy to block all outbound SSH traffic.

Configure a DNS filter to block SSH tunneling domains.

FortinetNSE 4 - FortiOS 7.6 Administrator

Domain 3Objective 1

Explain and Inspect Encrypted Traffic Using Certificates NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 1)

Part of the Content Inspection domain, which accounts for 25-30% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–18 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

5concepts

25-30%of the exam

Questions 1–5

1foundation · easy
A user reports a certificate error when accessing an HTTPS website through the FortiGate. The error says the certificate is not trusted. What is the most likely cause?
Select an answer first
2application · medium
A company wants to enforce application control on HTTPS traffic to block social media applications. They have enabled full SSL inspection. What must be done to ensure application control can identify the applications?
Select an answer first
3foundation · easy
Which FortiGate feature is used to inspect SSH traffic for policy enforcement?
Select an answer first
4foundation · easy
What is the main security concern that SSH inspection on FortiGate is designed to address?
Select an answer first
5application · medium
An administrator notices that some users are using SSH tunnels to bypass the firewall and access prohibited websites. The administrator wants to inspect SSH traffic to detect and block such tunneling. What should the administrator configure on the FortiGate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE4-FORTIOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.