FortinetNSE 4 - FortiOS 7.6 Administrator
Domain 5Objective 4
IPsec VPNs and Review Logs NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 4)
Part of the VPNs domain, which accounts for 10-15% of the NSE4-FORTIOS-ADMINISTRATOR exam. Fortinet does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–9 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)
21questions here
5free pages
4concepts
10-15%of the exam
Questions 16–20
- 16
In FortiGate VPN logs, which event type indicates that an IPsec tunnel has been successfully established?
Select an answer first - 17
A site-to-site IPsec tunnel is down. The administrator runs 'diag debug application ike -1' and sees 'IKE: Received INVALID_COOKIE notification'. What is the most likely cause?
Select an answer first - 18
A site-to-site IPsec tunnel between two FortiGates is up, but traffic intermittently fails. The administrator reviews the logs and sees 'IKE: DPD timeout' messages. What is the most likely cause of the intermittent failures?
Select an answer first - 19
A FortiGate administrator is configuring a site-to-site IPsec VPN and must choose between ESP and AH. The remote peer requires data encryption and integrity checking. Which protocol should be selected?
Select an answer first - 20
A site-to-site IPsec tunnel is down. The administrator runs 'diag debug application ike -1' and sees 'IKE: Send AUTHENTICATION_FAILED notification'. What is the most likely cause?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE4-FORTIOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.