Free Fortinet NSE4-5.4 Practice Test & Real Exam Questions

Exam Code/Number: NSE4-5.4
Exam Name/Title: Fortinet Network Security Expert 4 Written Exam - FortiOS 5.4
Certification Provider: Fortinet
Corresponding Certification: Network Security

Exam Questions: 575
Updated On: Jun 14, 2026

Question #1

Examine the exhibit, which contains a virtual IP and a firewall policy configuration.

The WAN(port1) interface has the IP address 10.200.1.1/24. The LAN(port2) interface has the IP address
10.0.1.254/24.
The top firewall policy has NAT enabled using outgoing interface address. The second firewall policy configured with a virtual IP (VIP) as the destination address.
Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

A. 10.200.1.10

B. 10.0.1.254

C. Any available IP address in the WAN(port1) subnet 10.200.1.0/24

D. 10.200.1.1

Discussion 0

Correct Answer: A Vote an answer

Question #2

Examine the exhibit, which shows the output of a web filtering real time debug.

Why is the site www.bing.com being blocked?

A. The web server IP address 204.79.197.200 is categorized by FortiGuard as Malicious Websites.

B. The rating for the web site www.bing.com has been locally overridden to a category that is being blocked.

C. The web site www.bing.com is categorized by FortiGuard as Malicious Websites.

D. The user has not authenticated with the FortiGate yet.

Discussion 0

Correct Answer: A Vote an answer

Question #3

If you have lost your password for the "admin" account on your FortiGate, how should you reset it?

A. Reboot the FortiGate. Via the local console, during the boot loader, use the menu to log in as "maintainer" and enter the CLI commands to set the password for the "admin" account.

B. Power off the FortiGate. After several seconds, restart it. Via the local console, within 30 seconds after booting has completed, log in as "maintainer" and enter the CLI commands to set the password for the "admin" account.

C. Log in with another administrator account that has "super_admin" profile permissions, then reset the password for the "admin" account.

D. Reboot the FortiGate. Via the local console, during the boot loader, use the menu to format the flash disk and reinstall the firmware. Then you can log in with the default password.

Discussion 0

Correct Answer: B Vote an answer

Question #4

Which statements are true regarding traffic shaping that is applied in an application sensor, and associated with a firewall policy? (Choose two.)

A. Only traffic matching the application control signature is shaped.

B. Per-IP traffic shaping cannot be used.

C. Can limit the bandwidth usage of heavy traffic applications.

D. Shared traffic shaping cannot be used.

Discussion 0

Correct Answer: A,C Vote an answer

Question #5

A static route is configured for a FortiGate unit from the CLI using the following commands:

Which of the following conditions are required for this static default route to be displayed in the FortiGate unit's routing table? (Choose two.)

A. The administrative status of the wan1 interface is displayed as down.

B. The link status of the wan1 interface is displayed as up.

C. All other default routers should have a lower distance.

D. The wan1 interface address and gateway address are on the same subnet.

Discussion 0

Correct Answer: B,D Vote an answer

Question #6

What are examples of correct syntax for the session table diagnostics command? (Choose two.)

A. diagnose sys session filter

B. diagnose sys session filter clear

C. diagnose sys session src 10.0.1.254

D. diagnose sys session filter list dst.

Discussion 0

Correct Answer: A,B Vote an answer

Question #7

Which of the following Session TTL values will take precedence?

A. Session TTL dictated by the application control list associated with the matching firewall policy

B. Session TTL specified at the system level for that port number

C. Session TTL specified in the matching firewall policy

D. The default session TTL specified at the system level

Discussion 0

Correct Answer: A Vote an answer

Question #8

What configuration objects are automatically added when using the FortiGate's FortiClient VPN Configurations Wizard?(Choose two)

A. Users group

B. Static route

C. Phase 2

D. Phase 1

Discussion 0

Correct Answer: C,D Vote an answer

Question #9

View the Exhibit.

Which statements are correct based on this output? (Choose two.)

A. The FortiGates have three VDOMs.

B. The root VDOM is not synchronized between the primary and secondary FortiGate.

C. The global configuration is synchronized between the primary and secondary FortiGate.

D. The all VDOM is not synchronized between the primary and secondary FortiGate.

Discussion 0

Correct Answer: B,C Vote an answer

Question #10

Examine the following log message for IPS and identify the valid responses below. (Select all that apply.)

A. The attack was TCP based.

B. The attack was detected and blocked.

C. The target is 192.168.3.170.

D. The target is 192.168.3.168.

E. The attack was detected only.

Discussion 0

Correct Answer: C,E Vote an answer

Question #11

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

A. The interface is a member of a zone.

B. The interface is a member of a virtual wire pair.

C. The operation mode is transparent.

D. Captive portal is enabled in the interface.

E. The interface has been configured for one-arm sniffer.

Discussion 0

Correct Answer: B,C,E Vote an answer

Download Free Fortinet NSE4-5.4 Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet NSE4-5.4 exam.