FORTINET-NSE123 Practice Test 1 — 10 Questions

Question 1

Which TWO of the following indicators are commonly associated with a potential phishing email? (Choose two)

Accepted Answer

Generic greetings like 'Dear Customer' instead of the recipient's actual name. Phishing emails frequently employ artificial urgency to prompt rash actions and often feature sender addresses with subtle domain spoofing or misspellings.

Answer

A standard newsletter sent via an officially approved corporate marketing platform with working unsubscribe links

Answer

Content written with perfect grammar, standard company formatting, and no sense of urgency

Answer

An email digitally signed with a valid corporate PKI certificate issued by the internal IT department

Question 2

Which THREE of the following practices help protect end-user devices (endpoints) from malware and compromise? (Choose three)

Accepted Answer

Exercising caution when clicking links or downloading files from untrusted sources. Endpoint protection, keeping software updated, and avoiding unverified links or downloads are vital practices for endpoint security.

Answer

Downloading cracked software and keygens from peer-to-peer file-sharing networks

Answer

Disabling all firewall rules and network logging to maximize system performance

Question 3

An enterprise security team implements Multi-Factor Authentication (MFA) across all employee accounts. Which combination of authentication factors represents the strongest implementation of MFA?

Accepted Answer

A password, a push notification sent to a physical mobile device, and a biometric thumbprint scan.. Strong MFA combines three distinct authentication factors: something you know, something you have, and something you are.

Answer

A smart card and a hardware security token.

Answer

A biometric fingerprint scan and a facial recognition scan.

Answer

A password and a PIN memorized by the user.

Question 4

Which TWO of the following measures contribute effectively to a robust 'Defense in Depth' security strategy for an enterprise? (Choose two)

Accepted Answer

Implementing network segmentation to restrict lateral movement between departments. Defense in depth relies on layering independent security controls, such as network segmentation and multi-factor authentication, so that if one control fails, another provides protection.

Answer

Relying entirely on a single powerful perimeter firewall with no internal security controls

Answer

Eliminating all system logs and monitoring to maximize user privacy

Answer

Disabling all endpoint antivirus solutions to improve computer processing speed

Question 5

Which THREE security principles are foundational components of the classic Information Security Triad (CIA Triad)? (Choose three.)

Accepted Answer

Availability, ensuring authorized users have reliable access to information and resources when needed.. The CIA Triad consists of Confidentiality, Integrity, and Availability.

Answer

Compliance, ensuring all regional government tax laws are strictly obeyed.

Answer

Cost-efficiency, ensuring security budgets remain minimal relative to operational revenue.

Question 6

An employee receives a phone call from an individual claiming to be from the IT department, asking for their network password to resolve an urgent system ticket. The caller sounds professional and urgent. What best describes this type of attack?

Accepted Answer

Vishing (Voice Phishing). Vishing (voice phishing) uses telephone communication to manipulate individuals into divulging confidential information.

Answer

Drive-by download

Answer

Denial of service

Answer

Phishing via email

Question 7

A remote employee connects to an unsecured public Wi-Fi network at a coffee shop and accesses internal corporate resources without utilizing a VPN. Which foundational security principle is primarily compromised in this scenario?

Accepted Answer

Confidentiality, because data in transit can be intercepted by third parties.. Confidentiality is compromised because data transmitted over an unsecured network in plaintext can be intercepted via packet sniffing.

Answer

Availability, because public networks are prone to high latency and packet loss.

Answer

Non-repudiation, because transactions cannot be cryptographically verified.

Answer

Integrity, because unauthorized users can modify corporate files in transit.

Question 8

Which TWO of the following actions should an end user take if they suspect their corporate credentials have been compromised? (Choose two)

Accepted Answer

Immediately notify the internal IT security or helpdesk team. Promptly reporting the incident to IT security and changing the password immediately are critical steps to mitigate unauthorized access.

Answer

Delete all files on the computer to erase evidence of the compromise

Answer

Post about the incident on public social media channels to warn friends

Answer

Keep the incident secret to avoid getting in trouble with management

Question 9

A cybersecurity analyst is investigating a security breach where an attacker bypassed perimeter defenses by sending a weaponized PDF attachment directly to a high-ranking executive's personal email account used on a corporate laptop. What specific type of targeted attack does this represent?

Accepted Answer

Whaling attack. Whaling is a form of spear phishing specifically directed at high-profile targets like executives or senior management.

Answer

Mass spam campaign

Answer

MAC spoofing attack

Answer

Structured query language injection

Question 10

An employee notices their workstation acting sluggish, and several desktop files have had their extensions changed to an unfamiliar format accompanied by a ransom text file. What type of attack has occurred?

Accepted Answer

Ransomware infection. Ransomware encrypts user or system files and demands payment for the decryption key.

Answer

DDoS attack

Answer

Man-in-the-middle interception

Answer

SQL injection