NSE6 Fortinet Advanced Products Professional

1.

What log type would indicate whether a VPN is going up or down?

Event log Security log Forward log Syslog

2.

What protocol cannot be used with the active authentication type?

Local RADIUS LDAP RSSO

3.

When configuring LDAP on the FortiGate as a remote database for users, what is not a part of the configuration?

The name of the attribute that identifies each user (Common Name Identifier). The user account or group element names (user DN). The server secret to allow for remote queries (Primary server secret). The credentials for an LDAP administrator (password).

4.

In diag debug flow output, you see the message Allowed by Policy-1: SNAT. Which is true?

The packet matched the topmost policy in the list of firewall policies. The packet matched the firewall policy whose policy ID is 1. The packet matched a firewall policy, which allows the packet and skips UTM checks The policy allowed the packet and applied session NAT.

5.

Which is NOT true about the settings for an IP pool type port block allocation?

A Block Size defines the number of connections. Blocks Per User defines the number of connection blocks for each user. An Internal IP Range defines the IP addresses permitted to use the pool. An External IP Range defines the IP addresses in the pool.

6.

Which is true of FortiGates session table?

NAT/PAT is shown in the central NAT table, not the session table. It shows TCP connection states. It shows IP, SSL, and HTTP sessions. It does not show UDP or ICMP connection state codes, because those protocols are connectionless.

7.

Which is true about incoming and outgoing interfaces in firewall policies?

A physical interface may not be used. A zone may not be used. Multiple interfaces may not be used for both incoming and outgoing. Source and destination interfaces are mandatory.

8.

Which is NOT true about source matching with firewall policies?

A source address object must be selected in the firewall policy. A source user/group may be selected in the firewall policy. A source device may be defined in the firewall policy. A source interface must be selected in the firewall policy. A source user/group and device must be specified in the firewall policy.

9.

If you enable the option Generate Logs when Session Starts, what effect does this have on the number of traffic log messages generated for each session?

No traffic log message is generated. One traffic log message is generated. Two traffic log messages are generated. A log message is only generated if there is a security event.

10.

Which best describes the authentication timeout?

How long FortiGate waits for the user to enter his or her credentials. How long a user is allowed to send and receive traffic before he or she must authenticate again. How long an authenticated user can be idle (without sending traffic) before they must authenticate again. How long a user-authenticated session can exist without having to authenticate again.

NSE6 Fortinet Advanced Products Professional

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

NSE6 Fortinet Advanced Products Professional

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner