NSE4_FGT-5.6 Exam Questions and Answers

QUESTION: 26

Which of the following statements are true regarding Cloud Access Security Inspection (CASI)? (Choose two.)

CASI requires an activated FortiCloud account.
A CASI license is required on FortiGate.
CASI requires a subscription to FortiGuard IPS and Application Control.
CASI is always proxy-based scanning.
CASI requires SSL deep inspection on a firewall policy.

Answer(s): C,E

Reveal Solution Next Question

QUESTION: 27

Which of the following statements describe WMI polling mode for FSSO collector agent? (Choose two.)

The collector agent does not need to search any security event logs.
WMI polling can increase bandwidth usage with large networks.
The NetSessionEnum function is used to track user logoffs.
The collector agent uses a Windows API to query DCs for user logins.

Answer(s): B,D

Reveal Solution Next Question

FortiGate has been configured for Firewall Authentication.
When attempting to access an external website, the user is not presented with a login prompt.
What is the most likely reason for this situation?

The user was authenticated using passive authentication.
No matching user account exists for this user.
The user is using a super admin account.
The user is using a guest account profile.

Answer(s): A

Reveal Solution Next Question

QUESTION: 29

Which statements correctly define Policy ID and policy Sequence number for firewall policies? (Choose two.)

A policy sequence number defines the order in which rules are processed.
A policy ID number is required to modify a firewall policy from the CLI.
A policy ID number changes when policies are re-ordered.
A policy sequence number reflects the number of objects used in the firewall policy.

Answer(s): A,B

Reveal Solution Next Question

QUESTION: 30

An administrator wants to monitor their network for any probing attempts aimed to exploit existing vulnerabilities in their servers.
What must they configure on their FortiGate to accomplish this? (Choose two.)

An application control profile and set all application signatures to monitor.
A DoS policy, and log all UDP and TCP scan attempts.
An IPS sensor to monitor all signatures applicable to the server.
A web application firewall profile to check protocol constraints.

Answer(s): B,C

Reveal Solution Next Question

Fortinet NSE4_FGT-5.6 Exam (page: 6)
Fortinet NSE 4 - FortiOS 5.6
Updated on: 15-Feb-2026

QUESTION: 26

QUESTION: 27

QUESTION: 28

QUESTION: 29

QUESTION: 30

Fortinet NSE4_FGT-5.6 Exam (page: 6) Fortinet NSE 4 - FortiOS 5.6 Updated on: 15-Feb-2026

QUESTION: 26

QUESTION: 27

QUESTION: 28

QUESTION: 29

QUESTION: 30

Fortinet NSE4_FGT-5.6 Exam (page: 6)
Fortinet NSE 4 - FortiOS 5.6
Updated on: 15-Feb-2026