FORTINET-NSE123 Practice Test 6 — 10 Questions

Question 1

What is the primary function of FortiMail in an enterprise security architecture?

Accepted Answer

To protect the organization against email-borne threats such as spam, malware, and phishing. FortiMail is a secure email gateway designed to protect organizations from spam, malware, phishing, and data loss via email.

Answer

To act as a centralized log analysis and reporting appliance

Answer

To manage wireless access points and guest Wi-Fi authentication portals

Answer

To provide SSL VPN client tunnels for remote workers

Question 2

Which TWO inspection modes are available on a FortiGate firewall for processing UTM security profiles? (Choose two.)

Accepted Answer

Flow-based inspection. FortiOS supports Flow-based inspection and Proxy-based inspection modes for UTM security profiles.

Answer

NAT routing inspection

Answer

Transparent bridging inspection

Answer

Static gateway inspection

Question 3

Which TWO actions should an employee take immediately upon suspecting their corporate laptop has been compromised by malware? (Choose two.)

Accepted Answer

Notify the internal IT security or incident response team without delay.. Upon suspecting a compromise, users should disconnect from the network to stop lateral movement and immediately report the incident to IT security.

Answer

Forward the suspicious file to all external clients as a warning alert.

Answer

Delete all system logs and temporary files to clear up disk space for the virus scanner.

Answer

Download and execute unverified registry cleaner utilities from pop-up advertisements.

Question 4

An enterprise is establishing a multi-layered security strategy for its infrastructure. Which implementation best demonstrates the concept of 'Defense-in-Depth'?

Accepted Answer

Implementing network segmentation, endpoint protection, multi-factor authentication, and user awareness training.. Defense-in-depth uses multiple overlapping security controls so that if one control fails, subsequent controls prevent a breach.

Answer

Relying solely on a next-generation firewall with advanced intrusion prevention configured at the edge.

Answer

Enforcing identical complex passwords across all local and cloud administrative portals.

Answer

Duplicating identical edge firewalls in an active-passive cluster for high availability.

Question 5

An administrator needs to back up the FortiGate configuration regularly and securely. Which method allows the administrator to encrypt the configuration file with a password before downloading it from the GUI?

Accepted Answer

Encrypting the backup configuration file with a password during export. When backing up a FortiGate configuration from the GUI or CLI, administrators can choose to encrypt the configuration file with a password so sensitive secrets like pre-shared keys are protected.

Answer

Streaming raw system logs to FortiAnalyzer

Answer

Exporting the configuration as an unencrypted plain-text XML file

Answer

Using SNMP v1 to pull configuration binaries over UDP

Question 6

What is the primary function of a FortiGate static route?

Accepted Answer

To manually specify the next-hop gateway for routing traffic to specific destination networks. A static route manually defines the next-hop IP gateway for specific destination subnets when packets cannot be resolved by directly connected interfaces.

Answer

To translate private internal IP addresses to public WAN IP addresses

Answer

To inspect HTTP web traffic for malicious scripts

Answer

To authenticate remote VPN users against Active Directory

Question 7

An administrator notices that a specific software application is being blocked by Application Control. Upon checking the logs, the administrator wants to create an exception to allow this specific application while keeping the rest of the application control category blocked. How can this be achieved?

Accepted Answer

By adding an Application Override rule inside the Application Control profile. Application Control profiles support application overrides, allowing administrators to add specific allow or block exceptions for individual applications within a category.

Answer

By disabling the entire Antivirus scanning engine globally

Answer

By changing the static routing table administrative distance

Answer

By switching the FortiGate firewall from NAT mode to Transparent mode

Question 8

Which THREE protocols or technologies are commonly used to establish secure remote access VPNs on a FortiGate? (Choose three.)

Accepted Answer

SSL VPN. FortiGate supports IPsec VPN, SSL VPN, and FortiClient-based telemetry/VPN tunnels for secure remote access.

Answer

Telnet plain-text management

Answer

HTTP unencrypted web browsing

Question 9

Which TWO strategies are recognized as effective defenses against social engineering attacks like phishing and pretexting? (Choose two.)

Accepted Answer

Conducting regular security awareness training and simulated phishing tests for all staff.. Effective defense against social engineering combines human security awareness training with robust technical email filtering controls.

Answer

Permitting unrestricted personal USB drive usage on all corporate endpoints without scanning.

Answer

Instructing employees to comply immediately with any urgent executive request received via personal email.

Answer

Disabling all spam and email filtering to ensure zero legitimate messages are ever delayed.

Question 10

Which TWO mechanisms are commonly utilized by attackers to establish persistence on a compromised workstation so they can retain access after a system reboot? (Choose two.)

Accepted Answer

Installing a kernel-level rootkit that hooks into core operating system processes.. Attackers maintain persistence through mechanisms such as scheduled tasks, startup registry keys, or installed rootkits.

Answer

Running a temporary calculation script inside an isolated browser incognito tab.

Answer

Running an optional software update diagnostic tool provided by the hardware manufacturer.

Answer

Clearing the system browser cache and emptying the local operating system recycle bin.