Free · No account needed · No credit card

Fortinet NSE 4 Network Security Professional NSE4 Practice Test

1,000 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Real exam: 105 min
Pass mark: 650%

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1System and Network Administrationmedium
Full explanation →

A company wants to ensure that administrative access to FortiGate is only allowed from the internal trusted network (192.168.1.0/24) and that all other access attempts are blocked. Which CLI command should the administrator configure first?

config system admin; edit admin; set trusthost 192.168.1.0 255.255.255.0; endCorrect
Bconfig system interface; edit port1; set allowaccess ping https ssh; end
Cconfig system global; set admin-http-redirect enable; end
Dset admin-sport 443

Option A is correct because the `config system admin` command with `set trusthost` restricts administrative login attempts to only the specified source IP address or subnet. By setting `trusthost 192.168.1.0 255.255.255.0`, the FortiGate will only allow admin access from the 192.…Read full explanation

Q2System and Network Administrationhard
Full explanation →

A FortiGate administrator is troubleshooting a high CPU usage issue. The 'get system performance status' command shows that the CPU usage is consistently above 80% with no traffic. Which of the following is the most likely cause?

AAn interface is in error-disable state causing CPU interrupts.
BThe firewall policy is misconfigured, causing packet drops.
CA DDoS attack is overwhelming the CPU.
A process such as the IPS engine is stuck in an infinite loop.Correct

When CPU usage remains high (above 80%) with no traffic, the most likely cause is a process stuck in an infinite loop, such as the IPS engine. This is a known software bug or process hang that consumes CPU cycles even without network traffic, and it can be verified using 'diagnos…Read full explanation

Q3System and Network Administrationeasy
Full explanation →

An administrator needs to back up the FortiGate configuration to a TFTP server at 10.0.0.10. Which command should be used?

Atftp -p -l mybackup.conf 10.0.0.10
execute backup config tftp mybackup.conf 10.0.0.10Correct
Cexecute backup config ftp mybackup.conf 10.0.0.10
Dcopy config tftp://10.0.0.10/mybackup.conf

The correct command to back up a FortiGate configuration to a TFTP server is 'execute backup config tftp <filename> <server-ip>'. This is a standard FortiOS CLI command that uses TFTP (Trivial File Transfer Protocol) to transfer the configuration file to the specified server at 1…Read full explanation

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All NSE4 questionsNSE4 exam guideStudy guidePractice by domain