NSE6 Exam Questions

Which network protocols are supported for administrative access to a FortiGate unit? (Choose three.)

In which process states is it impossible to interrupt/kill a process? (Choose two.)

What is the FortiGate password recovery process?

Which of the following statements are correct about the HA command diagnose sys ha reset- uptime? (Choose two.)

Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

Review the IPS sensor filter configuration shown in the exhibit. Based on the information in the exhibit, which statements are correct regarding the filter? (Choose two.)

Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of diagnose sys session stat for the STUDENT device. Exhibit B sho...

Which UTM feature sends a UDP query to FortiGuard servers each time FortiGate scans a packet (unless the response is locally cached)?

A new version of FortiOS firmware has just been released. When you upload new firmware, which is true?

Which protocols can you use for secure administrative access to a FortiGate? (Choose two)

Which statements are correct regarding an IPv6 over IPv4 IPsec configuration? (Choose two.)

Which is not a FortiGate feature?

Which profile could IPS engine use on an interface that is in sniffer mode? (Choose three)

Which operating system vulnerability can you protect when selecting signatures to include in an IPS sensor? (choose three)

You are creating a custom signature. Which has incorrect syntax?

Which best describe the mechanism of a TCP SYN flood?

Which statement is correct concerning creating a custom signature?

Your Linux email server runs on a non-standard port number, port 2525. Which statement is true?

What are the advantages of FSSO DC mode over polling mode?

Which of the following statements are correct about NTLM authentication? (Choose three)

Which is true about incoming and outgoing interfaces in firewall policies?

For FortiGate devices equipped with Network Processor (NP) chips, which are true? (Choose three.)

Which traffic can match a firewall policy's "Services" setting? (Choose three.)

Which is NOT true about source matching with firewall policies?

If you enable the option "Generate Logs when Session Starts", what effect does this have on the number of traffic log messages generated for each session?

Which best describes the authentication timeout?

Which authentication scheme is not supported by the RADIUS implementation on FortiGate?

Which are valid replies from a RADIUS server to an ACCESS-REQUEST packet from a FortiGate? (Choose two.)

Which authentication methods does FortiGate support for firewall authentication? (Choose two.)

Which methods can FortiGate use to send a One Time Password (OTP) to Two-Factor Authentication users? (Choose three.)

Acme Web Hosting is replacing one of their firewalls with a FortiGate. It must be able to apply port forwarding to their back-end web servers while blocking virus uploads and TCP S...

You have configured the DHCP server on a FortiGate's port1 interface (or internal, depending on the model) to offer IPs in a range of 192.168.1.65-192.168.1.253. When the first hos...

You have created a new administrator account, and assign it the prof_admin profile. Which is false about that account's permissions?

If you have lost your password for the "admin" account on your FortiGate, how should you reset it?

What are the ways FortiGate can monitor logs? (Choose three.)

To which remote device can the FortiGate send logs? (Choose three.)

In a Crash log, what does a status of 0 indicate?

There are eight (8) log severity levels that indicate the importance of an event. Not including Debug, which is only needed to log diagnostic data, what are both the lowest AND hig...

Which of the following are benefits of using web caching? (Choose three.)

Review the exhibit of an explicit proxy policy configuration. If there is a proxy connection attempt coming from the IP address 10.0.1.5, and from a user that has not authenticated...

When does a FortiGate load-share traffic between two static routes to the same destination subnet?

How is the FortiGate password recovery process?

When creating FortiGate administrative users, which configuration objects specify the account rights?

Which devices can receive logs from FortiSandbox? (Choose two.)

FortiGate is configured to send suspicious files to a FortiSandbox for in-line inspection. The administrator creates a new VDOM, and then generates some traffic so what the new VDO...

Which two types of digital certificates can you create in FortiAuthenticator? (Choose two.)

Which is true regarding Microsoft Office on FortiSandbox?

Which is not a supported captive portal authentication method?

An administrator is running the following sniffer in a FortiADC: What information is included in the output of the sniffer? (Choose two.)

Which protocols can a FortiSandbox inspect when is deployed in sniffer mode? (Choose two.)