FORTINET-NSE123 Practice Test 9 — 10 Questions

Question 1

What is the primary function of a firewall inspection mode that processes packets at Layer 3 and Layer 4 using packet headers without reassembling application streams?

Accepted Answer

Flow-based inspection. Flow-based inspection examines traffic patterns and metadata efficiently, whereas proxy-based inspection buffers and fully reconstructs application sessions.

Answer

Proxy-based inspection

Answer

Deep SSL decryption inspection

Answer

Sandbox isolation inspection

Question 2

When configuring an IPsec VPN tunnel in FortiOS, what is the purpose of Phase 2 negotiation?

Accepted Answer

To negotiate the security parameters and encryption algorithms used to protect user data packets (IPsec SAs). Phase 2 establishes the actual IPsec Security Associations (SAs) that protect user data traffic, negotiating encapsulation protocols (ESP/AH), encryption algorithms, and lifetime parameters.

Answer

To assign dynamic IP addresses to remote dial-up users via DHCP relay

Answer

To verify the administrator credentials attempting to log into the FortiGate GUI

Answer

To establish the initial IKE handshake and peer authentication identity

Question 3

What is the primary function of a FortiSwitch port configured with FortiLink?

Accepted Answer

To establish a secure management and data connection between a FortiGate and a FortiSwitch. FortiLink is a proprietary Fortinet protocol that connects FortiSwitches to a FortiGate firewall, enabling centralized management, VLAN provisioning, and security fabric integration.

Answer

To connect external ISP routers via PPPoE authentication

Answer

To scan emails for spam and phishing attachments

Answer

To tunnel remote worker traffic via IPsec site-to-site protocols

Question 4

Which TWO settings are required when configuring a basic static route on a FortiGate? (Choose two.)

Accepted Answer

Gateway IP address (next-hop). A static route requires a destination IP/subnet and a gateway IP (or outgoing interface) to forward packets.

Answer

IPsec Phase 1 Pre-Shared Key

Answer

Antivirus inspection profile

Answer

DHCP server IP pool range

Question 5

Which TWO of the following are considered 'social engineering' techniques?

Accepted Answer

Baiting a victim with a 'free' USB drive that contains malware.. Baiting and tailgating are both social engineering methods used to exploit human behavior.

Answer

Using a rainbow table to crack hashed passwords.

Answer

Performing a denial of service attack on a web server.

Answer

Using a vulnerability scanner to find open ports.

Question 6

What is the primary function of a FortiSwitch unit when integrated into the Fortinet Security Fabric?

Accepted Answer

To provide secure Layer 2 network access managed directly from the FortiGate. FortiSwitch provides secure Layer 2 access switching that integrates tightly with the FortiGate firewall, allowing centralized management and switch port security features.

Answer

To act as an external DNS and DHCP server for client workstations

Answer

To scan inbound email attachments for spam and phishing attacks

Answer

To provide SSL VPN portal access for remote mobile workers

Question 7

When configuring an SSL VPN tunnel mode connection for mobile workers, what does the FortiGate assign to the client machine to enable communication with internal subnets?

Accepted Answer

A virtual IP address from a configured SSL VPN IP pool. In SSL VPN tunnel mode, the FortiGate assigns a virtual IP address from a dedicated IP pool to the client virtual adapter.

Answer

A static public IP address belonging to the ISP WAN interface

Answer

A physical MAC address mapped to the switch port

Answer

A dynamic DNS hostname managed by FortiGuard

Question 8

Which THREE of the following are common indicators that a system has been compromised by malware?

Accepted Answer

An unexpected increase in outbound network traffic.. Unexpected system behavior, unauthorized network connections, and modified system files are clear signs of an infection.

Answer

The system boot time remains consistent with previous months.

Answer

The computer performs regular daily virus definition updates.

Question 9

An administrator needs to monitor bandwidth consumption across different applications on the FortiGate. Which feature allows the administrator to view real-time traffic bandwidth by application and enforce traffic shaping guarantees?

Accepted Answer

Traffic Shaping and FortiView Application monitors. Traffic Shaping policies and FortiView application monitors provide visibility and bandwidth control over specific applications and users.

Answer

Static routing administrative distance tables

Answer

Antivirus quarantine logs

Answer

High availability cluster heartbeat monitors

Question 10

An administrator wants to prevent users from uploading confidential company documents to external cloud storage websites. Which Fortinet security profile feature inspects outbound traffic for specific file types or sensitive keywords?

Accepted Answer

Data Loss Prevention (DLP) sensor. Data Loss Prevention (DLP) sensors inspect traffic for sensitive data signatures, file types, and keywords to prevent data exfiltration.

Answer

Intrusion Prevention System (IPS) sensor

Answer

Antivirus profile

Answer

Web filtering profile