Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

NSE4_FGT-60 by Fortinet - Page 1 | ExamCademy

Mode Selection

Question 1

Question 2

Question 3

When override is enabled, which of the following shows the process and selection criteria that are used to elect the primary FortiGate in an HA cluster?

A Connected monitored ports > HA uptime > priority > serial number
B Priority > Connected monitored ports > HA uptime > serial number
C Connected monitored ports > priority > HA uptime > serial number
D HA uptime > priority > Connected monitored ports > serial number

Question 4

An administrator is investigating a report of users having intermittent issues with browsing the web. The administrator ran diagnostics and received the output shown in the exhibit.

Question Image

Examine the diagnostic output shown exhibit. Which of the following options is the most likely cause of this issue?

A NAT port exhaustion
B High CPU usage
C High memory usage
D High session timeout value

Question 5

NGFW mode allows policy-based configuration for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?

A Web filtering
B Antivirus
C Web proxy
D Application control

Question 6

View the exhibit.

Question Image

Which users and user groups are allowed access to the network through captive portal?

A Users and groups defined in the firewall policy.
B Only individual users "" not groups "" defined in the captive portal configuration
C Groups defined in the captive portal configuration
D All users

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 2 • Questions 1-25 of 30

1 2

→

Know a question that should be here? Contribute to this exam

Which of the following conditions are required for establishing an IPSec VPN between two FortiGate devices? (Choose two.)

A If XAuth is enabled as a server in one peer, it must be enabled as a client in the other peer.
B If the VPN is configured as route-based, there must be at least one firewall policy with the action set to IPSec.
C If the VPN is configured as DialUp User in one peer, it must be configured as either Static IP Address or Dynamic DNS in the other peer.
D If the VPN is configured as a policy-based in one peer, it must also be configured as policy-based in the other peer.

An employee connects to the https://example.com on the Internet using a web browser. The web server's certificate was signed by a private internal CA. The
FortiGate that is inspecting this traffic is configured for full SSL inspection.
This exhibit shows the configuration settings for the SSL/SSH inspection profile that is applied to the policy that is invoked in this instance. All other settings are set to defaults. No certificates have been imported into FortiGate. View the exhibit and answer the question that follows.

Question Image

Which certificate is presented to the employee's web browser?

A The web server's certificate.
B The user's personal certificate signed by a private internal CA.
C A certificate signed by Fortinet_CA_SSL.
D A certificate signed by Fortinet_CA_Untrusted.

NSE4_FGT-60Preview

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

That's the end of the Preview