FORTINET-NSE123 Nse 2 Technical Introduction TO Fortinet Security — 10 Questions

Question 1

A security analyst needs to ensure that endpoints connected to the corporate network have an active, up-to-date FortiClient security agent installed before granting network access. Which Fortinet component manages endpoint compliance and synchronization with the Fortinet Security Fabric?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

FortiClient EMS. FortiClient EMS (Enterprise Management Server) manages FortiClient endpoints, deploys configurations, and enforces endpoint compliance within the Security Fabric.

Answer

FortiSandbox

Answer

FortiAnalyzer

Answer

FortiManager

Question 2

An administrator needs to protect internal servers against known vulnerability exploits and attack signatures traversing the network. Which security feature should be enabled in the firewall policy?

Accepted Answer

IPS sensor. Intrusion Prevention System (IPS) sensors inspect network traffic for vulnerability exploits and malicious signatures.

Answer

Web Filtering profile

Answer

Application Control profile

Answer

Data Loss Prevention (DLP) sensor

Question 3

A network engineer wants to inspect web traffic for malicious downloads and web-based threats passing through a FortiGate device. Where must this inspection profile be applied to take effect?

Accepted Answer

Inside an IPv4 firewall policy matching the traffic. Security profiles, such as Antivirus, Web Filtering, and IPS, must be bound to an active IPv4 or IPv6 firewall policy to inspect traffic traversing the FortiGate.

Answer

Directly under the physical interface configuration

Answer

Inside the static routing table configuration

Answer

Under the Global System Settings menu

Question 4

An administrator notices that users are accessing unauthorized social media websites during work hours. Which security profile feature should be configured on the FortiGate to block access to these specific categories of websites?

Accepted Answer

Web Filtering profile. Web Filtering allows administrators to block or allow websites based on predefined FortiGuard categories such as Social Networking.

Answer

DNS Filter profile

Answer

IPS sensor

Answer

Antivirus profile

Question 5

What is the primary function of a firewall inspection mode that processes packets at Layer 3 and Layer 4 using packet headers without reassembling application streams?

Accepted Answer

Flow-based inspection. Flow-based inspection examines traffic patterns and metadata efficiently, whereas proxy-based inspection buffers and fully reconstructs application sessions.

Answer

Proxy-based inspection

Answer

Deep SSL decryption inspection

Answer

Sandbox isolation inspection

Question 6

An enterprise branch office needs to establish a secure, encrypted site-to-site tunnel back to the headquarters FortiGate over the public internet. Which VPN technology provides a standard IPsec framework combined with Fortinet Security Fabric integration features?

Accepted Answer

IPsec VPN tunnel in route-based mode. IPsec VPN with aggressive or main mode supports secure site-to-site connectivity. In FortiOS, IPsec tunnels can be configured in policy-based or route-based modes.

Answer

FortiClient EMS telemetry connection

Answer

SSL VPN web portal mode

Answer

RADIUS single sign-on agent

Question 7

An organization wants to implement the Fortinet Security Fabric to gain centralized visibility across multiple distributed security devices. Which core protocol is utilized by Security Fabric devices to discover, authenticate, and securely communicate with the root FortiGate?

Accepted Answer

Security Fabric Downstream Heartbeat and REST API telemetry. The Security Fabric uses the Fortinet Fabric connector and specialized heartbeat/telemetry communication protocols over HTTPS/TLS to link downstream devices to the root FortiGate.

Answer

Dynamic Host Configuration Protocol (DHCP) option 43

Answer

Simple Network Management Protocol (SNMP) v3 traps

Answer

Syslog over unencrypted UDP port 514

Question 8

An administrator is setting up a new FortiGate firewall and needs to configure basic access control between the internal corporate network and the external public network. Which object type should the administrator create first to group internal IP addresses for policy creation?

Accepted Answer

Firewall Address object. Firewall addresses are used to group IP addresses or subnets so they can be easily referenced in firewall policies.

Answer

Application Control signature

Answer

Virtual IP object

Answer

Traffic Shaper object

Question 9

An administrator wants to allow remote workers to securely connect to the internal network using an SSL VPN web portal that presents a customized login page and bookmarks to internal resources. Which SSL VPN mode provides this browser-based access without requiring a pre-installed desktop client?

Accepted Answer

SSL VPN Web Mode. Web Mode SSL VPN provides a browser-based user interface with bookmarks to internal web applications and file shares without needing FortiClient.

Answer

Explicit Proxy Mode

Answer

IPsec Client Mode

Answer

SSL VPN Tunnel Mode

Question 10

Which Fortinet product acts as the centralized log management and reporting server that aggregates log data from multiple FortiGate devices across an enterprise network?

Accepted Answer

FortiAnalyzer. FortiAnalyzer collects, analyzes, and correlates log data from FortiGate and other Security Fabric devices, generating comprehensive reports.

Answer

FortiSandbox

Answer

FortiAuthenticator

Answer

FortiWeb