FORTINET-NSE123 Practice Test 10 — 10 Questions

Question 1

Which THREE methods can be used to back up or restore a FortiGate configuration? (Choose three.)

Accepted Answer

FortiManager centralized configuration management and revision templates. FortiGate configurations can be backed up or restored via the Web GUI, CLI (console/SSH/TFTP), and centralized management platforms like FortiManager.

Answer

FortiAnalyzer log archive export utilities

Answer

FortiClient EMS endpoint profile synchronization

Question 2

An enterprise requires authentication of remote users connecting via SSL VPN against a Microsoft Active Directory server. Which Fortinet component can be deployed to synchronize user credentials and provide single sign-on (SSO) services?

Accepted Answer

FortiAuthenticator. FortiAuthenticator integrates with Active Directory, provides user identity services, and acts as an RADIUS/LDAP server and SSO polling agent.

Answer

FortiWeb application firewall

Answer

FortiAnalyzer reporting engine

Answer

FortiManager policy server

Question 3

An administrator configures a firewall policy with Web Filtering. When a user tries to access a newly created website whose category is unknown by the FortiGate, how does FortiGate handle the rating request?

Accepted Answer

It sends a real-time rating query to the FortiGuard servers to classify the URL. When a URL is uncached or uncategorized locally, the FortiGate queries the FortiGuard Web Filtering rating servers in real-time to determine the category.

Answer

It forwards the page to FortiSandbox for zero-day file execution

Answer

It automatically blocks the website as a high-risk security threat

Answer

It quarantines the user's workstation inside FortiClient EMS

Question 4

An administrator wants to configure a firewall policy so that specific internal users can only access the internet during non-work hours. Which object type should be added to the firewall policy to enforce this time restriction?

Accepted Answer

Firewall Schedule object. Schedule objects define specific time periods and days of the week, which can be added to firewall policies to enforce time-based access control.

Answer

Virtual IP (VIP) object

Answer

Application Control signature

Answer

Traffic Shaper object

Question 5

An administrator wants to verify which configuration revision history is currently active and wants to roll back to a previous revision. Where can configuration revisions be managed in the web-based manager?

Accepted Answer

Administrator profile dropdown menu > Configuration > Revision History. Configuration revisions are managed under System > Configuration or via the administrator profile dropdown menu revision history.

Answer

Log & Report > Revision Logs

Answer

System > Maintenance > Rollback

Answer

Security Fabric > Backups

Question 6

A system administrator needs to update the signature databases for Antivirus and IPS on an isolated FortiGate that lacks direct internet connectivity. Which Fortinet product can be deployed locally on the network to act as an offline update distributor?

Accepted Answer

FortiManager configured as a local FortiGuard distribution server. FortiManager can act as a local distribution server (FDS proxy) to download updates from FortiGuard and distribute them to isolated FortiGate devices.

Answer

FortiClient EMS deployment server

Answer

FortiAuthenticator user database server

Answer

FortiWeb application firewall

Question 7

What is the primary function of a FortiAuthenticator device?

Accepted Answer

To centralize user authentication, identity services, and token management. FortiAuthenticator provides user identity services, guest management, two-factor authentication tokens, and SSO integration.

Answer

To scan incoming network traffic for virus signatures

Answer

To manage physical switch ports and VLANs via FortiLink

Answer

To analyze zero-day files in an isolated virtual sandbox

Question 8

When configuring an IPsec VPN tunnel between two FortiGate units, what is the function of Dead Peer Detection (DPD)?

Accepted Answer

To detect unresponsive VPN peers and tear down dead security associations. DPD detects dead or unresponsive VPN peers by periodically sending hello/acknowledgment probes, allowing the FortiGate to tear down stale security associations and re-establish the tunnel.

Answer

To authenticate administrators logging into the FortiGate GUI via RADIUS

Answer

To balance outbound traffic across multiple WAN interfaces using SD-WAN

Answer

To encrypt user data payloads using AES-256 algorithms

Question 9

What is the primary function of a firewall policy ID on a FortiGate?

Accepted Answer

To uniquely identify and reference the firewall policy rule. Every firewall policy is assigned a unique policy ID number by FortiOS to identify, reference, and reorder rules in the policy list.

Answer

To assign an IP address to the DHCP client

Answer

To determine the cryptographic key used for IPsec VPN encryption

Answer

To define the physical switch port VLAN assignment

Question 10

An administrator wants to ensure that all configuration changes made on a FortiGate are tracked with specific user accountability and revision history. Which Fortinet management tool provides centralized configuration revision control and rollback capabilities?

Accepted Answer

FortiManager. FortiManager maintains centralized configuration revisions, audit trails, and allows administrators to roll back changes to previous known-good states.

Answer

FortiAnalyzer

Answer

FortiClient EMS

Answer

FortiAuthenticator