Fortinet NSE4 Questions Answers

Examine the following spanning tree configuration on a FortiGate in transparent mode:

config system interface
edit <interface name>
set stp-forward enable
end

Which statement is correct for the above configuration?

A. The FortiGate participates in spanning tree.
B. The FortiGate device forwards received spanning tree messages.
C. Ethernet layer-2 loops are likely to occur.
D. The FortiGate generates spanning tree BPDU frames.

Answer: B


You are the administrator in charge of a point-to-point IPsec VPN between two FortiGate units using route-based mode. Users from either side must be able to initiate new sessions with no restrictions. There is only 1 subnet at either end and the FortiGate already has a default route.
Which two configuration steps are required in each FortiGate to achieve these objectives? (Choose two.)

A. Create one firewall policy.
B. Create two firewall policies.
C. Add a route to the remote subnet.
D. Add two IPsec phases 2.

Answer: BC