Where is Wepro Technology located?

Wepro Technology is based in Darwin, NT, Australia. We offer in-person instructor-led IT certification courses with flexible weekend and evening schedules.

What IT certification courses do you offer in Darwin?

We offer CCNA, CEH (Certified Ethical Hacker), CompTIA Security+, Network+, A+, Microsoft Azure AZ-900, Linux LPIC-1, Fortinet NSE4, MikroTik MTCNA, CHFI, and PenTest+ — all instructor-led in Darwin, NT.

Are there weekend IT courses available in Darwin?

Yes. Wepro Technology offers flexible weekend and evening batches specifically designed for working professionals in Darwin and the Northern Territory.

Do you provide CCNA training in Darwin?

Yes. Our CCNA course is one of our most popular programs, delivered in Darwin with hands-on labs covering routing, switching, and Cisco networking fundamentals.

Is cybersecurity certification training available in Darwin?

Yes. Wepro Technology offers CEH, CHFI, Security+, PenTest+, and other cybersecurity certification courses in Darwin, NT, Australia.

Free Fortinet Practice

Free Fortinet NSE4 FortiGate Quiz

Test your Fortinet NSE4 knowledge with this free practice quiz. Questions cover FortiOS basics, firewall policies, NAT, routing, IPsec and SSL VPN, security profiles (antivirus, web filtering, IPS, application control), authentication, high availability, and SD-WAN.

Ideal for network and security engineers in Australia working with Fortinet infrastructure.

Explore IT Courses

NSE4 Ready? Start the Free Quiz

Answer the multiple-choice questions below and submit to see how many you got right. A new randomised set is drawn from the question bank each session.

Select an answer to start0%

01Which FortiOS operating modes can a FortiGate be deployed in?

Transparent mode and Inline mode

NAT/Route mode and Transparent mode

Bridge mode and Gateway mode

Active mode and Passive mode

02What is the default administrative access port for the FortiGate GUI (HTTPS)?

Port 80

Port 8080

Port 443

Port 8443

03Which FortiOS component provides centralized logging, reporting, and management for multiple FortiGate devices?

FortiAnalyzer

FortiManager

FortiCloud

FortiSIEM

04What is the purpose of the FortiGate 'virtual domain' (VDOM) feature?

To create virtual private network tunnels between sites

To partition a single FortiGate into multiple independent virtual firewall instances

To simulate network traffic for testing security policies

To create virtual interfaces for VLAN tagging

05Which CLI command is used to access the FortiGate CLI from the web-based GUI?

System > CLI Console

Dashboard > CLI Widget

Dashboard > Network > CLI

Tools > Terminal

06What is the FortiGate 'heartbeat interface' used for in an HA cluster?

It connects to FortiManager for management traffic

It carries HA synchronization traffic including configuration, session tables, and failover signals between cluster members

It provides internet connectivity for firmware updates

It handles FortiGuard subscription service communication

07Which FortiOS feature provides dynamic DNS updates when the FortiGate's WAN IP address changes?

FortiGuard DNS

DDNS (Dynamic DNS)

DNS Filter

Split DNS

08In FortiOS, what does the 'diagnose sys top' command display?

Top bandwidth consumers on monitored interfaces

Real-time CPU and memory usage by FortiOS processes

Top firewall policies by hit count

Top source IP addresses by session count

09In FortiGate firewall policies, what is the significance of policy order?

Policies are matched by priority value regardless of their position in the list

Policies are matched top-to-bottom; the first matching policy is applied and subsequent policies are not evaluated

All policies are evaluated and the most specific match is applied

Policies are matched alphabetically by policy name

10Which firewall policy action in FortiOS passes traffic AND applies security profiles such as antivirus and web filtering?

DENY

ACCEPT with UTM

All ACCEPT actions automatically apply enabled security profiles

11What does the 'implicit deny' rule at the bottom of the FortiGate policy list do?

It denies all traffic not matched by explicit ACCEPT policies and logs the traffic

It denies all traffic not matched by explicit ACCEPT policies without logging by default

It allows traffic to pass if no other policy matches

It sends unmatched traffic to the IPS engine for deep inspection

12Which FortiGate object defines a reusable collection of IP addresses, address ranges, or FQDNs used in firewall policies?

Service object

Address object

IP pool

Virtual IP (VIP)

13In a FortiGate firewall policy, what is a 'service' object used to define?

The type of security inspection applied to matching traffic

Network protocols and port numbers (e.g., TCP/80 for HTTP, UDP/53 for DNS)

The time window during which the policy is active

The action taken when traffic matches the policy

14What is the purpose of a 'schedule' object in a FortiGate firewall policy?

To schedule automatic configuration backups

To restrict when a firewall policy is active, enabling time-based access control

To set maintenance windows for firmware updates

To define the interval for FortiGuard signature updates

15Which type of NAT in FortiOS translates many internal private IP addresses to a single public IP address for outbound internet access?

1:1 NAT (Static NAT)

PAT (Port Address Translation) / IP masquerade

Destination NAT (DNAT)

NAT64

16What is a FortiGate 'Virtual IP' (VIP) used for?

Creating virtual management IP addresses for HA clusters

Performing destination NAT (DNAT) to map a public IP/port to a private server IP/port

Assigning floating IPs to internal hosts for redundancy

Creating VLAN interfaces with secondary IP addresses

17When using Central NAT in FortiOS, how are NAT rules applied differently compared to policy-based NAT?

Central NAT rules apply globally before policy matching; policy-based NAT applies NAT within individual policies

Central NAT only supports static 1:1 NAT; policy-based NAT supports PAT

Central NAT requires VDOMs to be enabled; policy-based NAT works without VDOMs

Central NAT is evaluated after routing; policy-based NAT is evaluated before routing

18A FortiGate administrator configures an IP Pool of type 'Overload'. What behavior does this configure?

Maps each internal host to a unique public IP from the pool (1:1 mapping)

Randomly assigns public IPs from the pool to internal hosts

Uses all IP addresses in the pool with PAT, overloading multiple source IPs

Dedicates one public IP per subnet, overloading ports within each subnet

19Which FortiOS CLI command displays the current routing table?

show router info routing-table all

get router info routing-table all

diagnose ip route list

show ip route

20What is the default administrative distance for static routes in FortiOS?

110

21In FortiOS policy-based routing (PBR), traffic is routed based on which criteria?

Destination IP address and subnet mask only

Source and/or destination address, protocol, incoming interface, and other criteria independent of the main routing table

BGP path attributes and AS path length

DSCP markings and traffic class

22Which routing protocol is commonly used between FortiGate devices and ISP routers for BGP-based internet connectivity?

OSPF (Open Shortest Path First)

RIP v2 (Routing Information Protocol)

BGP (Border Gateway Protocol)

EIGRP (Enhanced Interior Gateway Routing Protocol)

23In FortiOS IPsec VPN, which IKE phase establishes the secure, authenticated channel (IKE SA) between VPN peers?

IKE Phase 1

IKE Phase 2

IKE Phase 3

ISAKMP Phase 0

24Which authentication method is considered more secure for FortiGate IPsec VPN peer authentication compared to a pre-shared key?

XAUTH (Extended Authentication)

Digital certificates (PKI/X.509)

RADIUS authentication

MD5 authentication

25What is the purpose of 'Dead Peer Detection' (DPD) in a FortiGate IPsec VPN configuration?

To detect and block malicious VPN connection attempts

To detect if a VPN peer has become unreachable and clear the stale tunnel

To measure latency between VPN endpoints

To force re-authentication of VPN peers after a timeout