FORTINET-NSE123 Multiple Select — 40 Questions

Question 1

Which TWO of the following indicators are commonly associated with a potential phishing email? (Choose two)

Accepted Answer

Generic greetings like 'Dear Customer' instead of the recipient's actual name. Phishing emails frequently employ artificial urgency to prompt rash actions and often feature sender addresses with subtle domain spoofing or misspellings.

Answer

A standard newsletter sent via an officially approved corporate marketing platform with working unsubscribe links

Answer

Content written with perfect grammar, standard company formatting, and no sense of urgency

Answer

An email digitally signed with a valid corporate PKI certificate issued by the internal IT department

Question 2

Which THREE of the following practices help protect end-user devices (endpoints) from malware and compromise? (Choose three)

Accepted Answer

Exercising caution when clicking links or downloading files from untrusted sources. Endpoint protection, keeping software updated, and avoiding unverified links or downloads are vital practices for endpoint security.

Answer

Downloading cracked software and keygens from peer-to-peer file-sharing networks

Answer

Disabling all firewall rules and network logging to maximize system performance

Question 3

Which TWO of the following measures contribute effectively to a robust 'Defense in Depth' security strategy for an enterprise? (Choose two)

Accepted Answer

Implementing network segmentation to restrict lateral movement between departments. Defense in depth relies on layering independent security controls, such as network segmentation and multi-factor authentication, so that if one control fails, another provides protection.

Answer

Relying entirely on a single powerful perimeter firewall with no internal security controls

Answer

Eliminating all system logs and monitoring to maximize user privacy

Answer

Disabling all endpoint antivirus solutions to improve computer processing speed

Question 4

Which THREE security principles are foundational components of the classic Information Security Triad (CIA Triad)? (Choose three.)

Accepted Answer

Availability, ensuring authorized users have reliable access to information and resources when needed.. The CIA Triad consists of Confidentiality, Integrity, and Availability.

Answer

Compliance, ensuring all regional government tax laws are strictly obeyed.

Answer

Cost-efficiency, ensuring security budgets remain minimal relative to operational revenue.

Question 5

Which TWO of the following actions should an end user take if they suspect their corporate credentials have been compromised? (Choose two)

Accepted Answer

Immediately notify the internal IT security or helpdesk team. Promptly reporting the incident to IT security and changing the password immediately are critical steps to mitigate unauthorized access.

Answer

Delete all files on the computer to erase evidence of the compromise

Answer

Post about the incident on public social media channels to warn friends

Answer

Keep the incident secret to avoid getting in trouble with management

Question 6

Which THREE practices represent fundamental cybersecurity hygiene for end users to protect corporate endpoints? (Choose three)

Accepted Answer

Promptly installing operating system and application security patches.. Keeping software updated, avoiding unverified downloads, and locking screens are foundational hygiene steps.

Answer

Storing master credentials in a plain-text document on the desktop for quick reference.

Answer

Disabling endpoint antivirus agents to maximize system performance during video calls.

Question 7

Which TWO characteristics describe effective password management principles? (Choose two.)

Accepted Answer

Using a password manager to generate and store complex, unique passwords securely.. Effective password management relies on using password managers to generate long, unique passphrases or passwords for every account.

Answer

Changing passwords every single week regardless of whether any compromise indicators exist.

Answer

Writing down primary administrator passwords on sticky notes attached to computer monitors.

Answer

Reusing the same strong password across all personal and professional accounts for convenience.

Question 8

Which TWO of the following behaviors are recommended when handling unexpected or suspicious email attachments? (Choose two)

Accepted Answer

Refrain from opening files with double extensions like .pdf.exe or unexpected script formats. Users should verify files with senders through independent channels and avoid opening unknown executable or script attachments.

Answer

Forward suspicious attachments to all coworkers to see if anyone recognizes them

Answer

Immediately open executable attachments (.exe) to check what program they run

Answer

Disable your antivirus software temporarily so it does not block the file download

Question 9

Which THREE of the following statements accurately describe foundational security principles in enterprise environments? (Choose three)

Accepted Answer

The principle of least privilege ensures users and accounts are granted only the minimum access needed. Least privilege, defense in depth, and separation of duties are core foundational security principles.

Answer

System administrators should always share a single root account password to ensure accountability

Answer

Security through obscurity should be used as the primary defense mechanism for databases

Question 10

Which TWO practices represent fundamental cybersecurity hygiene guidelines for everyday end users? (Choose two.)

Accepted Answer

Locking the workstation screen whenever walking away from the desk.. End users should maintain strong, unique passwords and lock their screens when leaving workstations unattended.

Answer

Clicking on unexpected email attachments immediately to verify their safety.

Answer

Sharing corporate passwords with trusted team members to ensure project continuity.

Answer

Disabling all endpoint antivirus software to speed up system performance.

Question 11

Which TWO of the following are core components of the Fortinet Security Fabric architecture? (Choose two.)

Accepted Answer

FortiAnalyzer. FortiGate (firewall) and FortiAnalyzer (logging/analytics) are core foundational pillars of the Fortinet Security Fabric.

Answer

VMware ESXi hypervisor

Answer

Microsoft Active Directory

Answer

Cisco Catalyst Switch

Question 12

Which TWO criteria can be used in a FortiGate firewall policy to match and control traffic? (Choose two.)

Accepted Answer

Service objects (ports and protocols like HTTP or SSH). Firewall policies match traffic based on source/destination interfaces, source/destination addresses, services, schedules, and user identities.

Answer

FortiGuard signature version number

Answer

CPU utilization percentage of FortiASIC chips

Answer

Administrator GUI idle timeout threshold

Question 13

Which THREE common indicators suggest that an email message might be a phishing attempt? (Choose three.)

Accepted Answer

A generic salutation such as 'Dear Customer' instead of the recipient's actual name.. Phishing emails often feature generic greetings, mismatched sender domains, and urgent demands for sensitive information.

Answer

A standard company-wide newsletter detailing upcoming office cafeteria holiday hours.

Answer

A digital signature verifying the cryptographic integrity and authenticity of the sender.

Question 14

Which THREE of the following characteristics are typical of social engineering attacks? (Choose three)

Accepted Answer

They frequently manufacture a sense of false urgency or panic to prompt rushed mistakes. Social engineering often relies on manipulation of human emotions such as fear or urgency, impersonation of trusted entities, and bypassing technical controls by targeting users.

Answer

They always require advanced kernel-level debugging tools to execute

Answer

They are entirely preventable by installing a standard graphics card driver update

Question 15

Which TWO methods are effective ways to protect user accounts against credential-based attacks like credential stuffing and brute-forcing? (Choose two)

Accepted Answer

Implementing account lockout policies after a threshold of failed login attempts.. Multi-factor authentication and account lockout policies effectively mitigate credential stuffing and brute-forcing.

Answer

Permitting HTTP plaintext transmission for login forms to speed up authentication.

Answer

Allowing users to share identical passwords to reduce password fatigue.

Answer

Disabling logging mechanisms to prevent server storage bloat.

Question 16

Which THREE of the following scenarios describe common forms of cybersecurity attacks against end users? (Choose three)

Accepted Answer

An employee receives an email mimicking IT support asking them to verify their credentials on a fake login portal. Phishing, baiting with USB drives, and tech support scams are all classic threat types targeting end users.

Answer

An organization implements strict role-based access control and regular auditing

Answer

A network administrator configures automated offboarding checklists for departed employees

Question 17

Which THREE of the following are recognized signs of a potential phishing attempt?

Accepted Answer

The email uses urgent or threatening language to demand immediate action.. Unexpected attachments, urgent language, and suspicious sender domains are common indicators of phishing.

Answer

The email is sent during standard business hours.

Answer

The email is addressed to the employee by their correct first name.

Question 18

Which TWO inspection modes are available on a FortiGate firewall for processing UTM security profiles? (Choose two.)

Accepted Answer

Flow-based inspection. FortiOS supports Flow-based inspection and Proxy-based inspection modes for UTM security profiles.

Answer

NAT routing inspection

Answer

Transparent bridging inspection

Answer

Static gateway inspection

Question 19

Which TWO actions should an employee take immediately upon suspecting their corporate laptop has been compromised by malware? (Choose two.)

Accepted Answer

Notify the internal IT security or incident response team without delay.. Upon suspecting a compromise, users should disconnect from the network to stop lateral movement and immediately report the incident to IT security.

Answer

Forward the suspicious file to all external clients as a warning alert.

Answer

Delete all system logs and temporary files to clear up disk space for the virus scanner.

Answer

Download and execute unverified registry cleaner utilities from pop-up advertisements.

Question 20

Which THREE protocols or technologies are commonly used to establish secure remote access VPNs on a FortiGate? (Choose three.)

Accepted Answer

SSL VPN. FortiGate supports IPsec VPN, SSL VPN, and FortiClient-based telemetry/VPN tunnels for secure remote access.

Answer

Telnet plain-text management

Answer

HTTP unencrypted web browsing