NSE4 System and Network Administration Practice Question
What is the purpose of configuring an NTP server on a FortiGate?
⚠ Common exam trap
A common mix-up: candidates confuse the purpose of NTP (time synchronization) with the features that depend on accurate time, such as time-based policies or FortiGuard authentication, leading them to select those as the primary purpose.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To synchronize the FortiGate's system clock with a reliable time source.
Configuring an NTP server on a FortiGate synchronizes the system clock with a reliable time source, which is essential for accurate logging, certificate validation, and time-based operations. While time-based firewall policies depend on an accurate clock, NTP itself is the mechanism to achieve that accuracy, not the policy feature itself.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To enable time-based firewall policies.
Why it's wrong here
While a synchronized clock is necessary for time-based firewall policies to operate correctly, enabling such policies is not the reason for configuring an NTP server. Time-based policies merely consume the system time; NTP's fundamental purpose is to synchronize that clock against an external reference. You could technically enable time-based policies without NTP, but any clock drift would make their enforcement inaccurate. Therefore, this option mistakes a downstream dependency for the core purpose.
- ✓
To synchronize the FortiGate's system clock with a reliable time source.
Why this is correct
This is the correct purpose. Configuring an NTP server on a FortiGate makes the firewall synchronize its internal hardware clock with an authoritative time source, ensuring accurate timestamps for logs, VPN certificates, and protocol operations that depend on consistent time. Without reliable synchronization, the system clock can drift, leading to issues such as expired certificates or misleading security logs. NTP is specifically designed to maintain that accuracy automatically and continuously.
- ✗
To allow the FortiGate to act as an NTP server for the network.
Why it's wrong here
Configuring an upstream NTP server places the FortiGate in the role of an NTP client, not a server. To act as an NTP server for other network devices, you must separately enable the FortiGate's NTP server mode and specify which clients are allowed to request time. Simply defining a server to sync from does not activate any server functionality; the FortiGate will only query that external server for its own time. This confusion between client and server roles makes this option incorrect.
- ✗
To authenticate with FortiGuard services.
Why it's wrong here
NTP is not used for authentication with FortiGuard. FortiGuard communication relies on the FortiGate's license, registration keys, and HTTPS/TLS connections, not on time synchronization. While an accurate clock is important for validating the certificates used in those connections, time is not a credential or an authentication method. Moreover, NTP only adjusts the system clock; it has no handshake or secret exchange that could establish identity, so this option misrepresents both NTP and FortiGuard mechanisms.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE4 question from scratch — 773 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.