NSE6 Exam Questions

Examine the network topology diagram in the exhibit; the workstation with the IP address 212.10.11.110 sends a TCP SYN packet to the workstation with the IP address 212.10.11.20. W...

Which of the following statements best describe what a FortiGate does when packets match a black hole route?

The exhibit shows two static routes to the same destinations subnet 172.20.168.0/24. Which of the following statements correctly describes this static routing configuration? (choos...

Which of the following statements are true regarding WAN Link Load Balancing? (Choose two).

The exhibit shoes three static routes. Which routes will be used to route the packets to the destination IP address 172.20.168.1?

The exhibit shows a FortiGate routing table. Which of the following statements are correct?(Choose two)

A FortiGate devices has two VDOMs in NAT/route mode. Which of the following solutions can be implemented by a network administrator to route traffic between the two VDOMs.(Choose t...

A FortiGate device is configured with two VDOMs. The management VDOM is 'root' , and is configured in transparent mode,'vdom1' is configured as NAT/route mode. Which traffic is gen...

Which of the following settings can be configured per VDOM? (Choose three)

Which of the following statements are correct regarding FortiGate virtual domains (VDOMs)? (Choose two)

Which of the following statements is correct concerning multiple vdoms configured in a FortiGate device?

A FortiGate unit has multiple VDOMs in NAT/route mode with multiple VLAN interfaces in each VDOM. Which of the following statements is correct regarding the IP addresses assigned t...

A FortiGate unit operating in NAT/route mode and configured with two sub-interface on the same physical interface. Which of the following statement is correct regarding the VLAN ID...

A FortiGate devices is configured with four VDOMs: 'root' and 'vdom1' are in NAT/route mode; 'vdom2' and 'vdom2' are in transparent mode. The management VDOM is 'root'. Which of th...

Which of the following statements is true regarding a FortiGate device operating in transparent mode? ( Choose three.)

Which of the following statements are correct concerning IPsec dialup VPN configurations for FortiGate devices? (Choose two)

Which of the following combinations of two FortiGate device configurations (side A and side B), can be used to successfully establish an IPsec VPN between them? (choose two)

Which of the following statements are correct differences between NAT/route and transparent mode? (Choose two.)

Which of the following are operating mode supported in FortiGate devices? (Choose two)

Review to the network topology in the exhibit. The workstation, 172.16.1.1/24, connects to port2 of the FortiGate device, and the ISP router, 172.16.1.2, connects to port1. Without...

Which of the following statement correct describes the use of the "diagnose sys ha reset-uptime" command?

What are required to be the same for two FortiGate units to form an HA cluster? (Choose two)

Which of the following statements describes the objectives of the gratuitous ARP packets sent by an HA cluster?

Which of the following statements are correct regarding a master HA unit? (Choose two)

Which statement describes how traffic flows in sessions handled by a slave unit in an active- active HA cluster?

Which of the following statements are correct concerning the FortiGate session life support protocol? (Choose two)

What is the default criteria for selecting the HA master unit in a HA cluster?

What information is synchronized between two FortiGate units that belong to the same HA cluster? (Choose three)

Which of the following statements are correct concerning the IPsec phase 1 and phase 2, shown in the exhibit? (choose two)

The exhibit shows a part output of the diagnostic command 'diagnose debug application ike 255', taken during establishment of a VPN. Which of the following statement are correct co...

What is required in a FortiGate configuration to have more than one dialup IPsec VPN using aggressive mode?

Which of the following statements are correct concerning IKE mode config? (Choose two)

Which statement is correct concerning an IPsec VPN with the remote gateway setting configured as 'Dynamic DNS'?

Which of the following protocols are defined in the IPsec Standard? (Choose two)

Which statement concerning IPS is false?

Which best describes the mechanism of a TCP SYN flood?

Which of the following statements best describes how the collector agent learns that a user has logged off from the network?

Which of the following statements best describes the role of a DC agents in an FSSO DC?

Which of the following FSSO modes must be used for Novell eDirectory networks?

In a FSSO agentless polling mode solution, where must the collector agent be?

Which of the following statements are characteristics of a FSSO solution using advanced access mode? (Choose three.)

Which of the following FSSO agents are required for a DC agent mode solution? (Choose two.)

In a FSSO agent mode solution, how does the FSSO collector agent learn each IP address?

Which FSSO agents are required for a FSSO agent-based polling mode solution?

What configuration objects are automatically added when using the FortiGate's FortiClient VPN Configurations Wizard?(Choose two)

Which of the following statements are correct concerning layer 2 broadcast domains in transparent mode VDOMs?(Choose two)

Which of the following statements is correct regarding FortiGate interfaces and spanning tree protocol? (Choose Two)

On your FortiGate 60D, you've configured firewall policies. They port forward traffic to your Linux Apache web server. Select the best way to protect your web server by using the I...

Which changes to IPS will reduce resource usage and improve performance? (Choose three)

How do you configure a FortiGate to apply traffic shaping to P2P traffic, such as BitTorrent?