NSE6 Fortinet Advanced Products Professional Set 1

1.

How do you configure a FortiGate to apply traffic shaping to P2P traffic, such as BitTorrent?

Apply a traffic shaper to a BitTorrent entry in an application control list, which is then applied to a firewall policy. Enable the shape option in a firewall policy with service set to BitTorrent. Define a DLP rule to match against BitTorrent traffic and include the rule in a DLP sensor with traffic shaping enabled. Apply a traffic shaper to a protocol options profile.

2.

What is the FortiGate password recovery process?

Interrupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry. Log in through the console port using the maintainer account within several seconds of physically power cycling the FortiGate. Hold down the CTRL + Esc (Escape) keys during reboot, then reset the admin password. Interrupt the boot sequence and restore a configuration file for which the password has been modified.

3.

Which UTM feature sends a UDP query to FortiGuard servers each time FortiGate scans a packet (unless the response is locally cached)?

Antivirus VPN IPS Web Filtering

4.

A new version of FortiOS firmware has just been released. When you upload new firmware, which is true?

If you upload the firmware image via the boot loaders menu from a TFTP server, it will not preserve the configuration. But if you upload new firmware via the GUI or CLI, as long as you are following a supported upgrade path, FortiOS will attempt to convert the existing configuration to be valid with any new or changed syntax. No settings are preserved. You must completely reconfigure. No settings are preserved. After the upgrade, you must upload a configuration backup file. FortiOS will ignore any commands that are not valid in the new OS. Inthose cases, you must reconfigure settings that are not compatible with the new firmware. You must use FortiConverter to convert a backup configuration file into the syntax required by the new FortiOS, then upload it to FortiGate.

5.

Which is not a FortiGate feature?

Database auditing Intrusion prevention Web filtering Application control

6.

When an administrator attempts to manage FortiGate from an IP address that is not a trusted host, what happens?

FortiGate will still subject that persons traffic to firewall policies; it will not bypass them. FortiGate will drop the packets and not respond. FortiGate responds with a block message, indicating that it will not allow that person to log in. FortiGate responds only if the administrator uses a secure protocol. Otherwise, it does not respond

7.

A backup file begins with this line:
#config-version=FGVM64-5.02-FW-build589-140613:opmode=0:vdom=0:user=admin #conf_file_ver=3881503152630288414 #buildno=0589 #global_vdom=1 Can you restore it to a FortiWiFi 60D?

Yes Yes, but only if you replace the #conf_file_ver line so that it contains the serial number of that specific FortiWiFi 60D. Yes, but only if it is running the same version of FortiOS, or a newer compatible version. No

8.

Acme Web Hosting is replacing one of their firewalls with a FortiGate. It must be able to apply port forwarding to their back-end web servers while blocking virus uploads and TCP SYN floods from attackers. Which operation mode is the best choice for these requirements?

NAT/route NAT mode with an interface in one-arm sniffer mode Transparent mode No appropriate operation mode exists

9.

You have configured the DHCP server on a FortiGate's port1 interface (or internal, depending on the model) to offer IPs in a range of 192.168.1.65-192.168.1.253. When the first host sends a DHCP request, what IP will the DHCP offer?

192.168.1.99 192.168.1.253 192.168.1.65 192.168.1.66

10.

You have created a new administrator account, and assign it the prof_admin profile. Which is false about that account's permissions?

It cannot upgrade or downgrade firmware. It can create and assign administrator accounts to parts of its own VDOM. It can reset forgotten passwords for other administrator accounts such as admin. It has a smaller permissions scope than accounts with the super_admin profile.

NSE6 Fortinet Advanced Products Professional Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

NSE6 Fortinet Advanced Products Professional Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner