How many Select Two (Multi-Select) Questions questions are on this page?

This page has 20 Select Two (Multi-Select) Questions scenario questions for the NSE4 exam, each with detailed explanations and wrong-answer analysis.

How should I approach NSE4 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Fortinet NSE 4 Network Security Professional NSE4 questions

Scenario-based practice

Select Two (Multi-Select) Questions

Practise Fortinet NSE 4 Network Security Professional NSE4 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

NSE4

exam code

Fortinet

vendor

Scenario guide

How to approach select two (multi-select) questions

Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.

Quick answer

Select Two (Multi-Select) Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediummulti select

Full question →

An administrator is configuring web filtering on a FortiGate. Which TWO statements about web filtering profiles are correct?

A
Web filtering profiles can be used together with application control profiles.
Correct; they can be applied to the same firewall policy.
B
Web filtering profiles can only be applied to users who are authenticated.
Why wrong: Web filtering can be applied to all traffic regardless of authentication.
C
Web filtering profiles can block access to websites based on URL categories and ratings.
Correct; this is a primary function of web filtering.
D
Web filtering profiles are applied globally by default.
Why wrong: Web filtering profiles are applied per firewall policy, not globally.
E
Web filtering profiles are used to configure SSL certificate inspection.
Why wrong: SSL inspection is configured in SSL/SSH inspection profiles, not web filtering profiles.

Select Two (Multi-Select) Questions

How to approach select two (multi-select) questions

Quick answer

Related NSE4 topic practice pages

System and Network Administration practice questions

Firewall Policies and NAT practice questions

Authentication and VPN practice questions

Security Profiles practice questions

High Availability and Diagnostics practice questions

NSE4 fundamentals practice questions

NSE4 scenario practice questions

NSE4 troubleshooting practice questions

Practice scenarios

An administrator is configuring web filtering on a FortiGate. Which TWO statements about web filtering profiles are correct?

An administrator is configuring an IPS profile on FortiGate to detect and block SQL injection attacks. The profile must be applied to inbound traffic to a web server. Which TWO settings should the administrator enable to achieve this goal? (Choose two.)

Which TWO are best practices for configuring IPsec VPN on FortiGate to ensure high availability and security?

A FortiGate is configured in an A-P HA cluster. The administrator wants to ensure that session failover occurs for UDP-based voice traffic. Which TWO settings must be enabled?

Which TWO actions can cause SSL inspection to fail with certificate errors on client browsers? (Choose two.)

Which TWO statements about IPS in FortiGate are true?

Which THREE factors should be considered when tuning IPS to reduce false positives?

An administrator needs to configure a FortiGate to send logs to a FortiAnalyzer. Which two configurations are required? (Choose two.)

A FortiGate administrator needs to configure NTP to ensure accurate time on the device. Which two steps are required? (Choose two.)

An admin needs to configure a FortiGate to send logs to a FortiAnalyzer. Which TWO steps must be performed? (Choose two.)

An administrator needs to integrate a FortiGate with FortiManager for centralized management. Which two steps are required? (Choose two.)

A FortiGate administrator is planning an upgrade from FortiOS 6.4 to 7.2. Which THREE steps should be performed before the upgrade? (Choose three.)

An administrator wants to use FortiManager to manage multiple FortiGates. Which three steps must be performed to establish communication between a FortiGate and FortiManager? (Choose THREE.)

An administrator wants to configure HA on two FortiGate units. Which TWO of the following must match on both units for the cluster to form? (Choose two.)

A FortiGate configured in transparent mode needs to allow HTTP traffic between two VLANs. The administrator has created a firewall policy. However, traffic is still blocked. Which TWO additional configurations are necessary for transparent mode operation?

A company has two internet connections (WAN1 and WAN2). The administrator wants to route HTTP traffic from the internal network through WAN1, and all other traffic through WAN2. Which TWO configurations are needed?

A FortiGate admin is troubleshooting a policy that should allow VoIP traffic. The admin suspects that the SIP ALG is interfering. Which TWO actions should the admin take to verify or resolve the issue?

Which TWO statements about firewall policy order are true?