NSE6 Exam Questions

When an administrator attempts to manage FortiGate from an IP address that is not a trusted host, what happens?

A backup file begins with this line: #config-version=FGVM64-5.02-FW-build589-140613:opmode=0:vdom=0:user=admin #conf_file_ver=3881503152630288414 #buildno=0589 #global_vdom=1 Can y...

Examine this log entry. What does the log indicate? (Choose three.) date=2013-12-04 time=09:30:18 logid=0100032001 type=event subtype=system level=information vd="root" user="admin...

Where are most of the security events logged?

What determines whether a log message is generated or not?

Which of the following are considered log types? (Choose three.)

What attributes are always included in a log header? (Choose three.)

What log type would indicate whether a VPN is going up or down?

Which correctly define "Section View" and "Global View" for firewall policies? (Choose two.)

What protocol cannot be used with the active authentication type?

When configuring LDAP on the FortiGate as a remote database for users, what is not a part of the configuration?

In "diag debug flow" output, you see the message "Allowed by Policy-1: SNAT". Which is true?

Which is NOT true about the settings for an IP pool type port block allocation?

Which define device identification? (Choose two.)

Which is true of FortiGate's session table?

Which user group types does FortiGate support for firewall authentication? (Choose three.)

Which of the following statements is true regarding the differences between route-based and policy-based IPsec VPNs? (Choose two.)

Which portion of the configuration does an administrator specify the type of IPsec configuration (either policy-based or route-based)?

Which of the following options best defines what Diffie-Hellman is?

How many packets are interchanged between both IPSec ends during the negotiation of a main- mode phase 1?

Which of the following IKE modes is the one used during the IPsec phase 2 negotiation?

Which of the following statements are true about IPsec VPNs? (Choose three.)

What is longest length of time allowed on a FortiGate device for the virus scan to complete?

Which of the following statements is true regarding the TCP SYN packets that go from a client, through an implicit web proxy (transparent proxy), to a web server listening at TCP p...

Which of the following statements is true regarding the use of a PAC file to configure the web proxy settings in an Internet browser? (Choose two.)

Alert emails enable the FortiGate unit to send email notifications to an email address upon detection of a pre-defined event type. Which of the following are some of the available...

Which two web filtering inspection modes inspect the full URL? (Choose two.)

Which protocol can an Internet browser use to download the PAC file with the web proxy configuration?

Which are the three different types of Conserve Mode that can occur on a FortiGate device? (Choose three.)

Files reported as "suspicious" were subject to which Antivirus check"?

Which type of conserve mode writes a log message immediately, rather than when the device exits conserve mode?

Files that are larger than the oversized limit are subjected to which Antivirus check?

A FortiGate device is configure to perform an AV & IPS scheduled update every hour. Given the information in the exhibit, when will the next update happen?

What is the maximum number of different virus databases a FortiGate can have?

Which of the following are possible actions for static URL filtering? (Choose three.)

Which of the following statements are true regarding the web filtering modes? (Choose two.)

Which of the following web filtering modes can inspect the full URL? (Choose two.)

Examine the following log message attributes and select two correct statements from the list below. (Choose two.) status="passthrough" msg="URL belongs to a category with warnings...

Which of the following are possible actions for FortiGuard web category filtering? (Choose three.)

Which of the following actions can be used with the FortiGuard quota feature? (Choose three.)

Which of the following statements are true regarding application control? (Choose two.)

In the debug command output shown in the exhibit, which of the following best described the MAC address 00:09:0f:69:03:7e ?

Which action does the FortiGate take when link health monitor times out?

What must be configured in order to keep two static routes to the same destination in the routing table?

The exhibit is a screen shot of an Application Control profile. Different settings are circled and numbered. Select the number identifying the setting which will provide additional...

How do application control signatures update on a FortiGate device?

Which answer best describes what an "Unknown Application" is?

What actions are possible with Application Control? (Choose three.)

Which is the following statement are true regarding application control? (choose two)

Which of the following fields contained in the IP/TCP/UDP headers can be used to make a routing decision when using policy-based routing? (Choose three)