NSE6 by Fortinet Valid Free Exam Practice Test

Question 1

Which of the following features are available in all FortiADC models? (Choose three.)

A. HTTP cookie persistence B. Source IP persistence C. Intrusion protection signatures D. Antivirus scanning E. SSL acceleration

Correct Answer: A,B,E

Question 2

If the corporate email policy dictates that SMTP over SSL/TLS is preferred for inbound
SMTP connections and required for outbound SMTP connections, which FortiMail configuration object would be used?

A. Access control rules B. Recipient policies C. Session profiles D. IP policies

Correct Answer: A

Question 3

What mechanism does FortiGate use to avoid sending a file that has been already inspected to FortiSandbox?

A. FortiGate sends a hash of the file to FortiSandbox. FortiSandbox checks if it has already inspected a file with that hash. B. FortiGate sends the file name to FortiSandbox. FortiSandbox checks if it has already inspected a file with that name. C. FortiGate searches its cache of a list of file names that it has already inspected. D. FortiGate sends the file name to FortiGuard. FortiGuard checks if a file with that name has been already inspected.

Correct Answer: B

Question 4

RADIUS authentication with FortiAuthenticator is not working. The traffic sniffer indicates that client traffic is not reaching FortiAuthenticator. Which could be the cause of the problem? (Choose two.)

A. Firewall policies on FortiGate B. Incorrect RADIUS client IP and pre-shared secret C. Authentication method on the RADIUS client D. Group filters on the RADIUS client

Correct Answer: A,B

Question 5

What actions can a FortiADC take for HTTP traffic that is coming from an IP address that is blacklisted in the FortiGuard IP reputation database? (Choose two.)

A. Forward the traffic to FortiAnalyzer B. Redirect the traffic to a different URL C. Block the traffic D. Apply a stricter profile to the traffic

Correct Answer: B,C

Question 6

Which of the following statements best describe what a SYN cookie does when a SYN packet is received?

A. It replies with two SYN/ACK packets. One containing the right acknowledge values, and one containing a wrong acknowledge value. B. It replies with a RST packet if the SYN packet doesn't contain the right cookie in the sequence field. C. It replies with a SYN/ACK packet containing a cookie value on the TCP acknowledge field. D. It sends a SYN/ACK with a cookie in the sequence field.

Correct Answer: C,D

Fortinet Network Security Expert 6 - NSE6 Exam Practice Test