FORTINET-NSE123 Practice Test 18 — 15 Questions

Question 1

An office worker is leaving their desk for a 15-minute lunch break. What is the most critical immediate security action they should take before walking away?

Accepted Answer

Lock the workstation screen. Locking the workstation prevents unauthorized physical access to sensitive open applications and data while the user is away.

Answer

Unplug the Ethernet network cable

Answer

Power down the computer completely

Answer

Minimize all open web browser windows

Question 2

An administrator is investigating a network routing issue on the FortiGate and needs to see the current active kernel routing table entries. Which CLI command provides this information?

Accepted Answer

get router info routing-table all. The command get router info routing-table all displays the active routing table known to the FortiGate routing daemon.

Answer

execute traceroute

Answer

get system interface

Answer

diagnose firewall IP-antibot list

Question 3

What is the primary purpose of FortiToken in a Fortinet security solution?

Accepted Answer

To provide two-factor authentication (2FA) for secure user logins. FortiToken provides two-factor authentication (2FA) tokens (hardware or software) to verify user identities securely during logins.

Answer

To accelerate encryption performance for IPsec VPN tunnels

Answer

To cache web filtering categories locally on the firewall

Answer

To quarantine infected endpoints automatically

Question 4

An administrator notices that users are accessing unauthorized social media websites during work hours. Which security profile feature should be configured on the FortiGate to block access to these specific categories of websites?

Accepted Answer

Web Filtering profile. Web Filtering allows administrators to block or allow websites based on predefined FortiGuard categories such as Social Networking.

Answer

DNS Filter profile

Answer

IPS sensor

Answer

Antivirus profile

Question 5

An end user receives an email from a display name matching their company executive, urging them to immediately click a link and purchase gift cards for a client meeting. Which foundational security concept and immediate action should the user apply?

Accepted Answer

Recognize the social engineering attempt and use the organization's phishing reporting tool.. This is a classic Business Email Compromise (BEC) and phishing attack. The user should report the email using the organization's Phishing Incident Response tool rather than clicking or replying.

Answer

Forward the email to all colleagues as a warning, including the live clickable link.

Answer

Reply to the sender asking for clarification using the reply button.

Answer

Treat it as an urgent executive request and fulfill the purchase immediately.

Question 6

An IT team is reviewing security logs and discovers that a user account was successfully accessed from two geographically impossible locations within a ten-minute timeframe. What type of anomaly does this represent?

Accepted Answer

Impossible travel anomaly. Impossible travel indicates that credentials are likely compromised and being used simultaneously by an attacker elsewhere.

Answer

Bandwidth saturation anomaly

Answer

Hardware failure indicator

Answer

DNS poisoning event

Question 7

An administrator suspects a routing loop or gateway failure and needs to test basic IP connectivity to the default gateway with a specified source IP. Which CLI command allows specifying the source IP for a ping test?

Accepted Answer

execute ping-options source [source-IP] followed by execute ping [dest-IP]. The execute ping-options command allows setting parameters like source IP before running an execute ping.

Answer

diagnose ping src [source-IP] [dest-IP]

Answer

set ping source [source-IP]

Answer

ping-source [source-IP] [dest-IP]

Question 8

A network administrator is setting up a corporate policy to prevent unauthorized internal users from sniffing traffic passing through a shared network segment. Which fundamental security principle is being addressed by implementing encrypted communication protocols like HTTPS and SSH?

Accepted Answer

Confidentiality. Confidentiality ensures that data is readable only by intended parties, which is achieved through encryption, preventing casual sniffing on shared segments.

Answer

Integrity

Answer

Availability

Answer

Non-repudiation

Question 9

Which TWO of the following principles are core tenets of the CIA triad in cybersecurity? (Choose two)

Accepted Answer

Integrity. Confidentiality, Integrity, and Availability form the foundational CIA triad of information security.

Answer

Complexity

Answer

Compliance

Answer

Concurrency

Question 10

A security analyst needs to ensure that endpoints connected to the corporate network have an active, up-to-date FortiClient security agent installed before granting network access. Which Fortinet component manages endpoint compliance and synchronization with the Fortinet Security Fabric?

Accepted Answer

FortiClient EMS. FortiClient EMS (Enterprise Management Server) manages FortiClient endpoints, deploys configurations, and enforces endpoint compliance within the Security Fabric.

Answer

FortiSandbox

Answer

FortiAnalyzer

Answer

FortiManager

Question 11

An administrator needs to test DNS resolution directly from the FortiGate command line interface to troubleshoot a FortiGuard connectivity issue. Which command should be used?

Accepted Answer

execute dns-lookup [hostname]. The execute ping or execute dns-lookup commands are used to test name resolution in FortiOS.

Answer

ping [hostname]

Answer

get system dns

Answer

diagnose test resolv [hostname]

Question 12

An administrator needs to reboot the FortiGate device remotely during a maintenance window without causing data corruption. Which CLI command should be executed?

Accepted Answer

execute reboot. The execute reboot command safely restarts the FortiGate device.

Answer

execute factory-reset

Answer

system restart

Answer

config system global set reboot

Question 13

An office worker receives an email claiming to be from the internal HR department, urgently requesting them to click a link and verify their banking details to avoid a delay in payroll. What is the most appropriate initial action for the employee to take according to foundational cybersecurity best practices?

Accepted Answer

Report the email using the organization's designated phishing reporting mechanism. Reporting the email using the organization's official phishing reporting tool is the safest and correct action, as it alerts the security team without interacting with the malicious link.

Answer

Click the link to verify if the website looks authentic before reporting it

Answer

Forward the email to all colleagues as a warning

Answer

Reply to the sender asking for verbal confirmation of their identity

Question 14

An administrator wants to customize the dashboard view by adding a new widget. What is the standard method to add widgets in the FortiGate GUI?

Accepted Answer

Click 'Add Widget' in the top-left corner of the Dashboard view. Widgets can be added by clicking the 'Add Widget' button on the Dashboard.

Answer

Right-click any empty space in the GUI background

Answer

Go to Log & Report > Dashboard Options

Answer

Go to System > Dashboard > Settings

Question 15

An administrator is troubleshooting a policy match issue and needs to inspect a specific security policy's hit count and ID directly from the CLI. Which CLI command should the administrator use to list all firewall policies with their internal IDs and rule details?

Accepted Answer

show firewall policy. To view firewall policies via CLI, the command show firewall policy is used inside the configuration context.

Answer

get system performance

Answer

diagnose sys session list

Answer

get system status