,"exhibitText":null,"options":[{"id":"ebdbab8d-1b34-4311-9082-5251e34c1b8d","label":null,"text":"The pre-shared key is incorrect","isCorrect":false},{"id":"c836dd0a-872f-4525-81c8-4fb9fb4f08b1","label":null,"text":"The Phase 1 encryption or hash algorithm is mismatched","isCorrect":true},{"id":"2c750275-06f8-4351-85e7-c4d44ff1582c","label":null,"text":"The remote gateway is not reachable","isCorrect":false},{"id":"a853b6de-8e2d-44c8-a0a8-e48816b60307","label":null,"text":"The firewall policy is blocking UDP port 500","isCorrect":false}],"domainName":"Authentication and VPN","domainSlug":"nse4-auth-vpn"},{"id":"062d8902-c9c8-4278-9a99-9375f6456250","slug":"which-command-is-used-to-back-up-the-fortigate-configuration-bdk0n","questionText":"Which command is used to back up the FortiGate configuration to a TFTP server?","explanation":"The correct command to back up the FortiGate configuration to a TFTP server is 'execute backup config tftp '. This is because FortiGate uses the 'execute' command for operational tasks, and 'backup config tftp' specifically instructs the system to export the running configuration to a TFTP server. The other options use incorrect syntax or commands that are not recognized by the FortiGate CLI.","domainId":"60aac0f3-dcd1-433e-98f5-cbd385d400d4","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"9f9927e6-f4af-4b51-b852-670169591031","label":null,"text":"save config tftp ","isCorrect":false},{"id":"e2f88c9b-5b42-4263-a2d4-435f313d25e5","label":null,"text":"backup tftp config ","isCorrect":false},{"id":"bbdb378d-f67c-4902-bdca-62b713532254","label":null,"text":"execute backup config tftp ","isCorrect":true},{"id":"67dd754e-7892-4e7c-ab7a-3c1ae4dc47d2","label":null,"text":"copy config tftp ","isCorrect":false}],"domainName":"System and Network Administration","domainSlug":"nse4-system-network"},{"id":"df221891-287b-40bf-b747-0704b5058947","slug":"a-network-administrator-needs-to-configure-a-fortigate-to-al-xf2ip","questionText":"A network administrator needs to configure a FortiGate to allow administrative access from a specific management subnet only. Which configuration step should be taken?","explanation":"The 'Trusted Hosts' feature under System > Admin > Settings allows you to restrict administrative access (HTTPS, SSH, Telnet, etc.) to specific source IP addresses or subnets. This is the intended method for limiting management access to a management subnet without affecting other traffic or interface configurations.","domainId":"60aac0f3-dcd1-433e-98f5-cbd385d400d4","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"2dad29e4-9e81-4c18-ab37-11ca10feb900","label":null,"text":"Create a local-in policy to permit traffic from the management subnet.","isCorrect":false},{"id":"a353dc96-cce3-410c-b770-4710f4dbe5e6","label":null,"text":"Disable administrative access on all interfaces except the management interface.","isCorrect":false},{"id":"88abc523-3517-440b-8f08-d0a6eb7d989c","label":null,"text":"Configure an inbound firewall policy allowing HTTPS from the management subnet to the FortiGate's interface IP.","isCorrect":false},{"id":"66ef1838-8135-4970-bb1c-f55edcdee933","label":null,"text":"Under system > admin > settings, restrict administrative access to trusted hosts.","isCorrect":true}],"domainName":"System and Network Administration","domainSlug":"nse4-system-network"},{"id":"39786c52-dcb0-4c54-b3e6-5b2a23337cfd","slug":"an-administrator-is-troubleshooting-a-fortigate-firewall-pol-4ukak","questionText":"An administrator is troubleshooting a FortiGate firewall policy that is supposed to allow HTTP traffic from the internal network to the internet. The policy is configured with source 'all', destination 'all', service 'HTTP', and action 'ACCEPT'. However, users report that HTTP traffic is being blocked. The administrator checks the policy list and sees that the policy is enabl