NSE4 System and Network Administration Practice Question
An administrator is configuring a loopback interface on a FortiGate for management purposes. Which three statements are true about loopback interfaces? (Choose three.)
⚠ Common exam trap
Watch out — candidates often confuse loopback interfaces with sub-interfaces or VLAN interfaces, incorrectly assuming they support VLAN tagging or require a physical port, when in fact loopback interfaces are purely logical and independent of hardware.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Multiple loopback interfaces can be created.
FortiGate allows the creation of multiple loopback interfaces (up to 16, depending on the model) for various purposes such as management, routing, or VPN termination. Each loopback interface is a virtual interface that does not depend on any physical port, providing flexibility in network design.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Multiple loopback interfaces can be created.
Why this is correct
FortiGate supports the creation of multiple loopback interfaces, each with its own unique IP address and routing table entries. This allows administrators to deploy several logical endpoints for different services—such as OSPF router IDs, BGP update sources, or management gateways—without consuming physical interface resources. The number of loopbacks is not limited by hardware ports, giving flexibility in network design.
- ✓
A loopback interface is always up regardless of physical link status.
Why this is correct
A loopback interface is a pure software construct that does not depend on any physical link state. As long as the interface is administratively enabled, it remains operationally up, even if all physical interfaces are down. This state makes it an ideal stable source address for routing protocols and monitoring services, since it never fluctuates due to cable or carrier outages.
- ✓
A loopback interface can be used as the source IP for management traffic.
Why this is correct
Because loopback interfaces always have a reachable IP (assuming routing), they can be designated as the source IP for management traffic such as HTTPS, SSH, ping, and SNMP. This ensures that administrative sessions originate from a consistent, always-up address, regardless of which physical egress path is available. On FortiGate, you can set the source IP in the administrator settings or per-protocol.
- ✗
Loopback interfaces support VLAN tagging.
Why it's wrong here
Loopback interfaces do not support 802.1Q VLAN tagging because they are not physical trunk ports and have no underlying Ethernet media. VLAN tagging is a Layer 2 function that requires a physical interface or a VLAN subinterface to add or remove VLAN headers. Attempting to apply a VLAN ID to a loopback interface is unsupported and meaningless, since loopbacks operate at Layer 3 without an associated L2 segment.
- ✗
A loopback interface requires a physical port to be associated.
Why it's wrong here
A loopback interface is entirely virtual and is not bound to any physical port, interface slot, or network processor. It exists solely in software and remains operational as long as the system is running and the interface is not administratively shut down. This independence from physical hardware is what allows it to be used for stable routing endpoints even when physical links fail or are over-subscribed.
Go deeper
Related to this question
About these practice questions
One of 773 original NSE4 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.