FORTINET-NSE123 Practice Test 2 — 10 Questions

Question 1

An organization implements a policy requiring all software installations on corporate endpoints to be approved and pushed centrally by the IT department, preventing users from installing unverified applications. Which security principle is being enforced?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Controlled application execution (Whitelisting). Application whitelisting or controlled application execution ensures that only pre-approved, trusted software can run on endpoints.

Answer

Network boundary defense

Answer

Asymmetric encryption key management

Answer

Principle of fail-secure

Question 2

An employee notices their computer screen locked with a message demanding cryptocurrency payment to restore encrypted files. What type of malware has infected the workstation?

Accepted Answer

Ransomware that encrypts critical files and demands payment for access.. Ransomware encrypts user files and demands a ransom payment in exchange for the decryption key.

Answer

A rootkit that grants administrative privileges to remote attackers.

Answer

Adware that automatically displays unwanted promotional banners.

Answer

Spyware that covertly records keystrokes and captures screenshots.

Question 3

Which THREE practices represent fundamental cybersecurity hygiene for end users to protect corporate endpoints? (Choose three)

Accepted Answer

Promptly installing operating system and application security patches.. Keeping software updated, avoiding unverified downloads, and locking screens are foundational hygiene steps.

Answer

Storing master credentials in a plain-text document on the desktop for quick reference.

Answer

Disabling endpoint antivirus agents to maximize system performance during video calls.

Question 4

A user reports that their workstation is running unusually slow and sending out large amounts of encrypted traffic to an unknown external IP. What is the most likely issue?

Accepted Answer

The host is infected with malware and participating in a botnet.. These symptoms are consistent with a botnet infection where the host is part of a command-and-control network.

Answer

The user installed a legitimate browser extension.

Answer

The user's local firewall is performing a full system scan.

Answer

The system is performing a routine background update.

Question 5

An organization wants to ensure that no single administrator has the unchecked authority to approve and deploy high-risk firewall rule changes into production. Which security governance mechanism should be implemented?

Accepted Answer

Separation of duties. Separation of duties ensures that critical tasks require authorization from multiple distinct individuals to prevent misuse or error.

Answer

Mandatory access control labeling

Answer

Single sign-on federation

Answer

Role-based access auditing

Question 6

An end user is browsing the internet and encounters a pop-up warning stating that their computer is infected with multiple viruses, prompting them to call a toll-free number immediately for technical support. What is the most accurate classification of this threat?

Accepted Answer

A tech support scam. Tech support scams use fear and false urgency via deceptive alerts to trick users into paying for unnecessary services or granting remote access to their machines.

Answer

A SQL injection exploit

Answer

A distributed denial-of-service attack

Answer

A legitimate endpoint telemetry notification

Question 7

An attacker calls the corporate helpdesk posing as a stressed executive traveling abroad, claiming they are locked out of their account and urgently need their password reset without going through standard verification protocols. This attack relies primarily on exploiting which vulnerability?

Accepted Answer

Human psychology and helpfulness. Social engineering exploits human psychology, such as helpfulness, fear, or authority, rather than technical software flaws.

Answer

Misconfigured firewall security policies

Answer

Cryptographic weak implementation

Answer

Unpatched operating system kernel bugs

Question 8

Which TWO characteristics describe effective password management principles? (Choose two.)

Accepted Answer

Using a password manager to generate and store complex, unique passwords securely.. Effective password management relies on using password managers to generate long, unique passphrases or passwords for every account.

Answer

Changing passwords every single week regardless of whether any compromise indicators exist.

Answer

Writing down primary administrator passwords on sticky notes attached to computer monitors.

Answer

Reusing the same strong password across all personal and professional accounts for convenience.

Question 9

An attacker intercepts legitimate communication between two parties and alters the message content while impersonating each party to the other. What type of cyber attack has occurred?

Accepted Answer

A man-in-the-middle attack intercepting and modifying transit data.. An attack where an adversary positions themselves between two endpoints to monitor or alter traffic is a Man-in-the-Middle (MitM) attack.

Answer

A distributed denial-of-service attack flooding servers.

Answer

A zero-day exploit leveraging unpatched software code.

Answer

A brute-force attack guessing login credentials.

Question 10

An end user receives an email from an external domain with a display name mimicking the company CEO, asking for an urgent wire transfer. What is the most accurate primary classification of this threat?

Accepted Answer

A targeted spear-phishing attack designed for financial fraud.. This scenario describes Business Email Compromise (BEC) and spear phishing, where attackers impersonate executives to induce financial fraud.

Answer

A brute-force credential stuffing attack.

Answer

An advanced persistent threat using zero-day malware.

Answer

A standard denial-of-service attack.