FORTINET-NSE123 Nse 2 Technical Introduction TO Fortinet Security — All Questions With Answers

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise branch office needs to establish a secure, encrypted site-to-site tunnel back to the headquarters FortiGate over the public internet. Which VPN technology provides a standard IPsec framework combined with Fortinet Security Fabric integration features?

Question 2hardmultiple choice

An organization wants to implement the Fortinet Security Fabric to gain centralized visibility across multiple distributed security devices. Which core protocol is utilized by Security Fabric devices to discover, authenticate, and securely communicate with the root FortiGate?

Question 3hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to deploy a wireless network across a corporate campus managed directly by the FortiGate firewall. Which Fortinet technology enables the FortiGate to control and provision FortiAPs directly?

Question 4mediummultiple choice

An administrator notices that a specific software application is being blocked by Application Control. Upon checking the logs, the administrator wants to create an exception to allow this specific application while keeping the rest of the application control category blocked. How can this be achieved?

Question 5easymulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO firewall operational modes can be configured on a FortiGate device? (Choose two.)

Question 6hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A security analyst is reviewing a FortiGate configuration and notices that a firewall policy has the action set to 'DENY' but the 'Log Violation Traffic' option is disabled. The analyst wants to ensure that all denied traffic is logged for auditing purposes. What should the analyst do?

Question 7mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator is configuring a FortiGate to use two-factor authentication for SSL VPN users. The administrator wants to combine something the user knows with something the user has. Which TWO authentication methods can be combined to achieve this? (Choose two.)

Question 8mediummultiple choice

A security analyst needs to ensure that endpoints connected to the corporate network have an active, up-to-date FortiClient security agent installed before granting network access. Which Fortinet component manages endpoint compliance and synchronization with the Fortinet Security Fabric?

Question 9mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator needs to protect internal servers against known vulnerability exploits and attack signatures traversing the network. Which security feature should be enabled in the firewall policy?

Question 10mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A network engineer wants to inspect web traffic for malicious downloads and web-based threats passing through a FortiGate device. Where must this inspection profile be applied to take effect?

Question 11easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator notices that users are accessing unauthorized social media websites during work hours. Which security profile feature should be configured on the FortiGate to block access to these specific categories of websites?

Question 12easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a firewall inspection mode that processes packets at Layer 3 and Layer 4 using packet headers without reassembling application streams?

Question 13easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator is setting up a new FortiGate firewall and needs to configure basic access control between the internal corporate network and the external public network. Which object type should the administrator create first to group internal IP addresses for policy creation?

Question 14mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to allow remote workers to securely connect to the internal network using an SSL VPN web portal that presents a customized login page and bookmarks to internal resources. Which SSL VPN mode provides this browser-based access without requiring a pre-installed desktop client?

Question 15easymultiple choice

Which Fortinet product acts as the centralized log management and reporting server that aggregates log data from multiple FortiGate devices across an enterprise network?

Question 16easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An organization is deploying FortiGate firewalls to segment internal network zones. What is the default action of a newly created firewall policy when traffic matches neither this policy nor any other rule?

Question 17hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When a FortiGate device inspects HTTPS traffic using deep inspection, how does the security engine handle the TLS/SSL encryption handshake between the client and the destination server?

Question 18mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A system administrator needs to update the signature databases for Antivirus and IPS on an isolated FortiGate that lacks direct internet connectivity. Which Fortinet product can be deployed locally on the network to act as an offline update distributor?

Question 19hardmultiple choice

Read the full DHCP explanation →

An organization requires high availability (HA) for two FortiGate devices to ensure continuous network uptime during hardware failures. Which operating mode synchronizes sessions, configuration, and routing state between the primary and secondary units in an active-passive cluster?

Question 20hardmultiple choice

When configuring a FortiGate interface to connect to an external ISP network that utilizes dynamic IP assignment via DHCP, which setting must be enabled on the interface parameters?

Question 21easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary purpose of defining zones (interface zones) in FortiOS firewall configurations?

Question 22hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An organization is deploying a FortiGate firewall in NAT mode. By default, how does the FortiGate handle outbound traffic leaving the internal network for the internet in terms of source IP addressing?

Question 23mediummultiple choice

A network security administrator needs to block peer-to-peer (P2P) file sharing applications across the corporate network. Which FortiOS security feature should be added to the firewall policy to identify and block these specific applications regardless of the ports they use?

Question 24easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which Fortinet tool provides a centralized management pane of glass for provisioning, updating, and monitoring multiple FortiGate firewall policies and device configurations across an enterprise?

Question 25mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to inspect incoming files for unknown zero-day malware using advanced behavior analysis in a secure virtual environment before allowing them onto endpoints. Which Fortinet security component fulfills this requirement?

Question 26mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator configures a firewall policy with Antivirus enabled in flow-based inspection mode. When a user attempts to download an infected file, how does the FortiGate handle the transfer?

Question 27hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise is configuring a redundant multi-WAN architecture on a FortiGate. Which feature allows the FortiGate to automatically measure latency, jitter, and packet loss on multiple internet connections and dynamically steer traffic over the best performing path?

Question 28easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When logging into the FortiGate Web-based Manager (GUI) for the first time, what is the default administrator username?

Question 29hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise requires authentication of remote users connecting via SSL VPN against a Microsoft Active Directory server. Which Fortinet component can be deployed to synchronize user credentials and provide single sign-on (SSO) services?

Question 30easymultiple choice

What is the primary function of a FortiGate Virtual IP (VIP) object?

Question 31hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel between two FortiGate devices, what is the specific role of Phase 1 negotiation?

Question 32mediummultiple choice

An administrator wants to ensure that specific internal users can access the internet while others cannot, based on their Active Directory group membership. How can this access control be implemented on a FortiGate?

Question 33easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which Fortinet security product is specifically designed to protect web applications (such as public-facing e-commerce portals) against OWASP Top 10 vulnerabilities like SQL injection and cross-site scripting?

Question 34mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator needs to back up the FortiGate configuration regularly and securely. Which method allows the administrator to encrypt the configuration file with a password before downloading it from the GUI?

Question 35easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary purpose of the FortiGuard distribution network in the Fortinet Security Fabric?

Question 36mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator configures a firewall policy with Web Filtering. When a user tries to access a newly created website whose category is unknown by the FortiGate, how does FortiGate handle the rating request?

Question 37hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel in FortiOS, what is the purpose of Phase 2 negotiation?

Question 38easymultiple choice

What is the primary function of a FortiSwitch unit when integrated into the Fortinet Security Fabric?

Question 39mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator needs to monitor bandwidth consumption across different applications on the FortiGate. Which feature allows the administrator to view real-time traffic bandwidth by application and enforce traffic shaping guarantees?

Question 40hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An organization is deploying FortiGate in Transparent mode instead of NAT mode. How does a Transparent mode FortiGate handle incoming packets at Layer 2?

Question 41mediummultiple choice

An administrator wants to ensure that administrative access to the FortiGate GUI is restricted to secure HTTPS connections only, while disabling insecure HTTP access. Where is this administrative access protocol configured on the FortiGate?

Question 42hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring FortiGate High Availability (HA) in active-passive mode, what is the role of the heartbeat interfaces?

Question 43easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of FortiMail in an enterprise security architecture?

Question 44easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary purpose of FortiToken in a Fortinet security solution?

Question 45easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiAuthenticator device?

Question 46hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise branch office has two distinct internet connections (Fiber and Cable). The administrator wants traffic to preferentially use the Fiber link, but automatically fail over to the Cable link if the Fiber link experiences packet loss exceeding 5%. Which FortiOS feature accomplishes this?

Question 47easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a firewall policy ID on a FortiGate?

Question 48mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator notices that the FortiGate system disk is filling up rapidly with log files. Which action should be taken to ensure local storage does not run out of space while retaining historical logs?

Question 49hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an SSL VPN tunnel mode connection for mobile workers, what does the FortiGate assign to the client machine to enable communication with internal subnets?

Question 50mediummultiple choice

An administrator wants to prevent users from uploading confidential company documents to external cloud storage websites. Which Fortinet security profile feature inspects outbound traffic for specific file types or sensitive keywords?

Question 51mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to view a chronological log of security threats and blocked virus events in real-time directly on the FortiGate GUI. Which FortiOS feature provides this live graphical and tabular logging interface?

Question 52hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator is configuring a FortiGate firewall and needs to ensure that packets matching an explicit allow policy are also logged. Where should the administrator enable logging for this specific policy?

Question 53easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary purpose of a firewall address group in FortiOS?

Question 54mediummultiple choice

Review the full subnetting walkthrough →

An administrator needs to restrict administrative access to the FortiGate CLI and GUI so that management connections are only accepted from a specific trusted internal management workstation subnet. Where is this source IP restriction configured?

Question 55hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel between two FortiGate units, what is the function of Dead Peer Detection (DPD)?

Question 56easymultiple choice

What is the primary function of FortiSandbox in an enterprise security architecture?

Question 57mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to ensure that all configuration changes made on a FortiGate are tracked with specific user accountability and revision history. Which Fortinet management tool provides centralized configuration revision control and rollback capabilities?

Question 58hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring dynamic routing on a FortiGate using OSPF, what is the purpose of defining OSPF areas?

Question 59easymultiple choice

What is the primary function of a FortiGate firewall policy action set to 'Accept'?

Question 60mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to block specific types of USB or removable storage devices from connecting to corporate laptops. Which Fortinet component manages endpoint device control policies?

Question 61hardmultiple choice

An organization is deploying an SD-WAN architecture on a FortiGate. When multiple WAN interfaces are combined into an SD-WAN zone, how do firewall policies reference the destination or source of the traffic?

Question 62easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiGate static route?

Question 63mediummultiple choice

An administrator notices that a FortiGate high availability (HA) cluster has experienced a failover. Which log category on the FortiGate or FortiAnalyzer should the administrator check to investigate the cause of the HA state transition?

Question 64hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an SSL VPN portal on a FortiGate, what is the primary operational difference between SSL VPN Web Mode and Tunnel Mode?

Question 65easymultiple choice

What is the primary function of a FortiGate hardware acceleration processor (FortiASIC)?

Question 66mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to configure a firewall policy so that specific internal users can only access the internet during non-work hours. Which object type should be added to the firewall policy to enforce this time restriction?

Question 67hardmultiple choice

When configuring an IPsec VPN tunnel between two FortiGate units using pre-shared keys (PSK), what is required for successful Phase 1 authentication?

Question 68easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiGate interface configured in NAT mode?

Question 69mediummultiple choice

An administrator needs to ensure that critical administrative login events and firewall configuration changes generate an immediate real-time alert email. Where are email alert settings configured on the FortiGate?

Question 70hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise is deploying FortiGate High Availability (HA) in active-active mode. How does active-active mode differ from active-passive mode regarding session handling?

Question 71easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiGate firewall policy source interface setting?

Question 72hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel in FortiOS, what is the role of NAT Traversal (NAT-T)?

Question 73mediummultiple choice

An administrator wants to ensure that internal users attempting to visit known phishing or malware-hosting domains are blocked automatically before establishing a connection. Which security profile should be added to the firewall policy?

Question 74easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiGate firewall policy destination setting?

Question 75hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel between two FortiGate units, what is the purpose of establishing a local ID (Peer ID) in Phase 1?

Question 76easymultiple choice

What is the primary function of a FortiSwitch port configured with FortiLink?

Question 77mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator needs to ensure that administrative sessions to the FortiGate GUI automatically terminate after 15 minutes of inactivity. Where is this idle timeout setting configured?

Question 78easymulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO of the following are core components of the Fortinet Security Fabric architecture? (Choose two.)

Question 79hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring dynamic routing on a FortiGate using OSPF, what is the function of a designated router (DR) in a multi-access broadcast network?

Question 80mediummulti select

Which TWO inspection modes are available on a FortiGate firewall for processing UTM security profiles? (Choose two.)

Question 81hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE protocols or technologies are commonly used to establish secure remote access VPNs on a FortiGate? (Choose three.)

Question 82easymulti select

Which TWO security profiles can be attached to a FortiGate firewall policy to protect against malware and threats? (Choose two.)

Question 83mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO authentication methods or servers can be integrated with a FortiGate for user identity verification? (Choose two.)

Question 84hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE features are provided by FortiClient EMS when integrated into the Fortinet Security Fabric? (Choose three.)

Question 85mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO settings are required when configuring a basic static route on a FortiGate? (Choose two.)

Question 86hardmulti select

Which THREE methods can be used to back up or restore a FortiGate configuration? (Choose three.)

Question 87easymulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO types of objects can be created to group network resources for firewall policies on a FortiGate? (Choose two.)

Question 88mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO criteria can be used in a FortiGate firewall policy to match and control traffic? (Choose two.)

Question 89hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE components or protocols are involved in establishing and maintaining a FortiGate High Availability (HA) cluster using FGCP? (Choose three.)

Question 90easymulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO protocols can be enabled on a FortiGate interface for secure administrative access? (Choose two.)

Question 91mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO threat intelligence services or features are delivered dynamically by the FortiGuard network? (Choose two.)

Question 92hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE parameters must be configured identically on both peers to successfully establish an IPsec Phase 1 tunnel? (Choose three.)

Question 93easymulti select

Which TWO logging destinations can receive log data from a FortiGate firewall? (Choose two.)

Question 94mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO features or protocols are used in Fortinet SD-WAN deployments to optimize multi-path traffic routing? (Choose two.)

Question 95easymultiple choice

An administrator is setting up a FortiGate firewall and needs to define the security posture for traffic flowing from the internal network to the external Internet. Which object type should the administrator configure to enforce unified threat management features such as Antivirus, Web Filtering, and Intrusion Prevention on that traffic?

Question 96hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE actions can a FortiGate Web Filtering profile take when a user attempts to access a website belonging to a blocked category? (Choose three.)

Question 97easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Within the Fortinet Security Fabric architecture, what is the primary role of an upstream FortiGate device acting as the root node compared to downstream internal segmentation firewalls?

Question 98mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise network architect is designing a site-to-site VPN architecture to connect a branch office to headquarters using FortiGate devices. The branch office relies on a dynamic broadband connection with a frequently changing public IP address. Which VPN configuration approach should be implemented?

Question 99mediummultiple choice

A network administrator notices that a web filtering profile configured on a FortiGate is blocking a specific educational video streaming category, but the exception list needs to allow a single permitted URL within that category. Where in FortiOS should the administrator add this specific URL override?

Question 100hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator is troubleshooting a scenario where internal users can browse safe websites, but HTTPS inspection using certificates is throwing browser security warnings for certain internal web applications. What is the most likely cause of this behavior when using Deep Packet Inspection (DPI) on FortiGate?

Question 101mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A security analyst is investigating a security alert generated by FortiGate Intrusion Prevention System (IPS). The log indicates that a known exploit signature was detected and dropped. How does FortiGate IPS inspect network traffic to identify such patterns?

Question 102hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An organization is deploying FortiClient Endpoint Management Server (EMS) alongside FortiGate to enforce Zero Trust Network Access (ZTNA). A remote user's laptop connects to an unsecured public Wi-Fi hotspot. How does the Fortinet ZTNA solution ensure secure application access for this user without establishing a traditional full-tunnel VPN?

Question 103easymultiple choice

An administrator needs to ensure that internal network users cannot bypass corporate security policies by using unauthorized peer-to-peer file sharing or gaming applications. Which FortiGate security feature is specifically designed to identify and take action against these types of network protocols?

Question 104mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO of the following statements correctly describe core concepts of the Fortinet Security Fabric? (Choose two.)

Question 105hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring firewall policies on a FortiGate device, an administrator must define matching criteria and actions. Which THREE elements are mandatory components of a standard IPv4 firewall policy in FortiOS? (Choose three.)

Question 106mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO of the following characteristics differentiate SSL VPN from IPsec VPN when deploying remote access solutions on a FortiGate? (Choose two.)

Question 107hardmulti select

An administrator is hardening endpoint security using FortiClient and FortiGate integration. Which THREE core security functions can be enforced through this endpoint-to-firewall integration? (Choose three.)

Question 108mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A network administrator is deploying FortiGate next-generation firewalls at the perimeter and wants to inspect encrypted traffic for malware without breaking user privacy for banking and healthcare sites. The administrator plans to use SSL inspection but needs to avoid decrypting sensitive categories. Which FortiGate feature should be used to selectively bypass decryption for specific website categories?

Question 109easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A security analyst is reviewing logs from a FortiGate and notices numerous entries indicating that traffic from the internal network to a specific external IP is being blocked by a firewall policy. The analyst wants to quickly identify which firewall policy is responsible for the block. Which FortiGate log field should the analyst examine to find the policy ID that matched the traffic?

Question 110easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A network administrator at a branch office is deploying a FortiGate 60F and wants to provide a single, unified dashboard that shows the real-time status of all Fortinet devices in the branch, including the FortiSwitch and FortiAP. Which Fortinet feature should the administrator enable to discover and display these devices automatically?

Question 111mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A security administrator is configuring a FortiGate to inspect traffic for malicious files. The administrator wants to ensure that files are analyzed in a sandbox environment to detect zero-day threats. Which Fortinet product should be integrated with the FortiGate to provide this sandboxing capability?

Question 112mediummultiple choice

An administrator needs to allow remote users to access the corporate network securely over the internet. The administrator wants to use a FortiGate's built-in VPN functionality that provides a clientless web portal for users to access internal resources. Which VPN type should the administrator configure?

Question 1hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise branch office needs to establish a secure, encrypted site-to-site tunnel back to the headquarters FortiGate over the public internet. Which VPN technology provides a standard IPsec framework combined with Fortinet Security Fabric integration features?

Question 2hardmultiple choice

An organization wants to implement the Fortinet Security Fabric to gain centralized visibility across multiple distributed security devices. Which core protocol is utilized by Security Fabric devices to discover, authenticate, and securely communicate with the root FortiGate?

Question 3hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to deploy a wireless network across a corporate campus managed directly by the FortiGate firewall. Which Fortinet technology enables the FortiGate to control and provision FortiAPs directly?

Question 4mediummultiple choice

An administrator notices that a specific software application is being blocked by Application Control. Upon checking the logs, the administrator wants to create an exception to allow this specific application while keeping the rest of the application control category blocked. How can this be achieved?

Question 5easymulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO firewall operational modes can be configured on a FortiGate device? (Choose two.)

Question 6hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A security analyst is reviewing a FortiGate configuration and notices that a firewall policy has the action set to 'DENY' but the 'Log Violation Traffic' option is disabled. The analyst wants to ensure that all denied traffic is logged for auditing purposes. What should the analyst do?

Question 7mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator is configuring a FortiGate to use two-factor authentication for SSL VPN users. The administrator wants to combine something the user knows with something the user has. Which TWO authentication methods can be combined to achieve this? (Choose two.)

Question 8mediummultiple choice

A security analyst needs to ensure that endpoints connected to the corporate network have an active, up-to-date FortiClient security agent installed before granting network access. Which Fortinet component manages endpoint compliance and synchronization with the Fortinet Security Fabric?

Question 9mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator needs to protect internal servers against known vulnerability exploits and attack signatures traversing the network. Which security feature should be enabled in the firewall policy?

Question 10mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A network engineer wants to inspect web traffic for malicious downloads and web-based threats passing through a FortiGate device. Where must this inspection profile be applied to take effect?

Question 11easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator notices that users are accessing unauthorized social media websites during work hours. Which security profile feature should be configured on the FortiGate to block access to these specific categories of websites?

Question 12easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a firewall inspection mode that processes packets at Layer 3 and Layer 4 using packet headers without reassembling application streams?

Question 13easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator is setting up a new FortiGate firewall and needs to configure basic access control between the internal corporate network and the external public network. Which object type should the administrator create first to group internal IP addresses for policy creation?

Question 14mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to allow remote workers to securely connect to the internal network using an SSL VPN web portal that presents a customized login page and bookmarks to internal resources. Which SSL VPN mode provides this browser-based access without requiring a pre-installed desktop client?

Question 15easymultiple choice

Which Fortinet product acts as the centralized log management and reporting server that aggregates log data from multiple FortiGate devices across an enterprise network?

Question 16easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An organization is deploying FortiGate firewalls to segment internal network zones. What is the default action of a newly created firewall policy when traffic matches neither this policy nor any other rule?

Question 17hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When a FortiGate device inspects HTTPS traffic using deep inspection, how does the security engine handle the TLS/SSL encryption handshake between the client and the destination server?

Question 18mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A system administrator needs to update the signature databases for Antivirus and IPS on an isolated FortiGate that lacks direct internet connectivity. Which Fortinet product can be deployed locally on the network to act as an offline update distributor?

Question 19hardmultiple choice

Read the full DHCP explanation →

An organization requires high availability (HA) for two FortiGate devices to ensure continuous network uptime during hardware failures. Which operating mode synchronizes sessions, configuration, and routing state between the primary and secondary units in an active-passive cluster?

Question 20hardmultiple choice

When configuring a FortiGate interface to connect to an external ISP network that utilizes dynamic IP assignment via DHCP, which setting must be enabled on the interface parameters?

Question 21easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary purpose of defining zones (interface zones) in FortiOS firewall configurations?

Question 22hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An organization is deploying a FortiGate firewall in NAT mode. By default, how does the FortiGate handle outbound traffic leaving the internal network for the internet in terms of source IP addressing?

Question 23mediummultiple choice

A network security administrator needs to block peer-to-peer (P2P) file sharing applications across the corporate network. Which FortiOS security feature should be added to the firewall policy to identify and block these specific applications regardless of the ports they use?

Question 24easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which Fortinet tool provides a centralized management pane of glass for provisioning, updating, and monitoring multiple FortiGate firewall policies and device configurations across an enterprise?

Question 25mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to inspect incoming files for unknown zero-day malware using advanced behavior analysis in a secure virtual environment before allowing them onto endpoints. Which Fortinet security component fulfills this requirement?

Question 26mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator configures a firewall policy with Antivirus enabled in flow-based inspection mode. When a user attempts to download an infected file, how does the FortiGate handle the transfer?

Question 27hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise is configuring a redundant multi-WAN architecture on a FortiGate. Which feature allows the FortiGate to automatically measure latency, jitter, and packet loss on multiple internet connections and dynamically steer traffic over the best performing path?

Question 28easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When logging into the FortiGate Web-based Manager (GUI) for the first time, what is the default administrator username?

Question 29hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise requires authentication of remote users connecting via SSL VPN against a Microsoft Active Directory server. Which Fortinet component can be deployed to synchronize user credentials and provide single sign-on (SSO) services?

Question 30easymultiple choice

What is the primary function of a FortiGate Virtual IP (VIP) object?

Question 31hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel between two FortiGate devices, what is the specific role of Phase 1 negotiation?

Question 32mediummultiple choice

An administrator wants to ensure that specific internal users can access the internet while others cannot, based on their Active Directory group membership. How can this access control be implemented on a FortiGate?

Question 33easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which Fortinet security product is specifically designed to protect web applications (such as public-facing e-commerce portals) against OWASP Top 10 vulnerabilities like SQL injection and cross-site scripting?

Question 34mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator needs to back up the FortiGate configuration regularly and securely. Which method allows the administrator to encrypt the configuration file with a password before downloading it from the GUI?

Question 35easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary purpose of the FortiGuard distribution network in the Fortinet Security Fabric?

Question 36mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator configures a firewall policy with Web Filtering. When a user tries to access a newly created website whose category is unknown by the FortiGate, how does FortiGate handle the rating request?

Question 37hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel in FortiOS, what is the purpose of Phase 2 negotiation?

Question 38easymultiple choice

What is the primary function of a FortiSwitch unit when integrated into the Fortinet Security Fabric?

Question 39mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator needs to monitor bandwidth consumption across different applications on the FortiGate. Which feature allows the administrator to view real-time traffic bandwidth by application and enforce traffic shaping guarantees?

Question 40hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An organization is deploying FortiGate in Transparent mode instead of NAT mode. How does a Transparent mode FortiGate handle incoming packets at Layer 2?

Question 41mediummultiple choice

An administrator wants to ensure that administrative access to the FortiGate GUI is restricted to secure HTTPS connections only, while disabling insecure HTTP access. Where is this administrative access protocol configured on the FortiGate?

Question 42hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring FortiGate High Availability (HA) in active-passive mode, what is the role of the heartbeat interfaces?

Question 43easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of FortiMail in an enterprise security architecture?

Question 44easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary purpose of FortiToken in a Fortinet security solution?

Question 45easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiAuthenticator device?

Question 46hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise branch office has two distinct internet connections (Fiber and Cable). The administrator wants traffic to preferentially use the Fiber link, but automatically fail over to the Cable link if the Fiber link experiences packet loss exceeding 5%. Which FortiOS feature accomplishes this?

Question 47easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a firewall policy ID on a FortiGate?

Question 48mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator notices that the FortiGate system disk is filling up rapidly with log files. Which action should be taken to ensure local storage does not run out of space while retaining historical logs?

Question 49hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an SSL VPN tunnel mode connection for mobile workers, what does the FortiGate assign to the client machine to enable communication with internal subnets?

Question 50mediummultiple choice

An administrator wants to prevent users from uploading confidential company documents to external cloud storage websites. Which Fortinet security profile feature inspects outbound traffic for specific file types or sensitive keywords?

Question 51mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to view a chronological log of security threats and blocked virus events in real-time directly on the FortiGate GUI. Which FortiOS feature provides this live graphical and tabular logging interface?

Question 52hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator is configuring a FortiGate firewall and needs to ensure that packets matching an explicit allow policy are also logged. Where should the administrator enable logging for this specific policy?

Question 53easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary purpose of a firewall address group in FortiOS?

Question 54mediummultiple choice

Review the full subnetting walkthrough →

An administrator needs to restrict administrative access to the FortiGate CLI and GUI so that management connections are only accepted from a specific trusted internal management workstation subnet. Where is this source IP restriction configured?

Question 55hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel between two FortiGate units, what is the function of Dead Peer Detection (DPD)?

Question 56easymultiple choice

What is the primary function of FortiSandbox in an enterprise security architecture?

Question 57mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to ensure that all configuration changes made on a FortiGate are tracked with specific user accountability and revision history. Which Fortinet management tool provides centralized configuration revision control and rollback capabilities?

Question 58hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring dynamic routing on a FortiGate using OSPF, what is the purpose of defining OSPF areas?

Question 59easymultiple choice

What is the primary function of a FortiGate firewall policy action set to 'Accept'?

Question 60mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to block specific types of USB or removable storage devices from connecting to corporate laptops. Which Fortinet component manages endpoint device control policies?

Question 61hardmultiple choice

An organization is deploying an SD-WAN architecture on a FortiGate. When multiple WAN interfaces are combined into an SD-WAN zone, how do firewall policies reference the destination or source of the traffic?

Question 62easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiGate static route?

Question 63mediummultiple choice

An administrator notices that a FortiGate high availability (HA) cluster has experienced a failover. Which log category on the FortiGate or FortiAnalyzer should the administrator check to investigate the cause of the HA state transition?

Question 64hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an SSL VPN portal on a FortiGate, what is the primary operational difference between SSL VPN Web Mode and Tunnel Mode?

Question 65easymultiple choice

What is the primary function of a FortiGate hardware acceleration processor (FortiASIC)?

Question 66mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator wants to configure a firewall policy so that specific internal users can only access the internet during non-work hours. Which object type should be added to the firewall policy to enforce this time restriction?

Question 67hardmultiple choice

When configuring an IPsec VPN tunnel between two FortiGate units using pre-shared keys (PSK), what is required for successful Phase 1 authentication?

Question 68easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiGate interface configured in NAT mode?

Question 69mediummultiple choice

An administrator needs to ensure that critical administrative login events and firewall configuration changes generate an immediate real-time alert email. Where are email alert settings configured on the FortiGate?

Question 70hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise is deploying FortiGate High Availability (HA) in active-active mode. How does active-active mode differ from active-passive mode regarding session handling?

Question 71easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiGate firewall policy source interface setting?

Question 72hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel in FortiOS, what is the role of NAT Traversal (NAT-T)?

Question 73mediummultiple choice

An administrator wants to ensure that internal users attempting to visit known phishing or malware-hosting domains are blocked automatically before establishing a connection. Which security profile should be added to the firewall policy?

Question 74easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

What is the primary function of a FortiGate firewall policy destination setting?

Question 75hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring an IPsec VPN tunnel between two FortiGate units, what is the purpose of establishing a local ID (Peer ID) in Phase 1?

Question 76easymultiple choice

What is the primary function of a FortiSwitch port configured with FortiLink?

Question 77mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator needs to ensure that administrative sessions to the FortiGate GUI automatically terminate after 15 minutes of inactivity. Where is this idle timeout setting configured?

Question 78easymulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO of the following are core components of the Fortinet Security Fabric architecture? (Choose two.)

Question 79hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring dynamic routing on a FortiGate using OSPF, what is the function of a designated router (DR) in a multi-access broadcast network?

Question 80mediummulti select

Which TWO inspection modes are available on a FortiGate firewall for processing UTM security profiles? (Choose two.)

Question 81hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE protocols or technologies are commonly used to establish secure remote access VPNs on a FortiGate? (Choose three.)

Question 82easymulti select

Which TWO security profiles can be attached to a FortiGate firewall policy to protect against malware and threats? (Choose two.)

Question 83mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO authentication methods or servers can be integrated with a FortiGate for user identity verification? (Choose two.)

Question 84hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE features are provided by FortiClient EMS when integrated into the Fortinet Security Fabric? (Choose three.)

Question 85mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO settings are required when configuring a basic static route on a FortiGate? (Choose two.)

Question 86hardmulti select

Which THREE methods can be used to back up or restore a FortiGate configuration? (Choose three.)

Question 87easymulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO types of objects can be created to group network resources for firewall policies on a FortiGate? (Choose two.)

Question 88mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO criteria can be used in a FortiGate firewall policy to match and control traffic? (Choose two.)

Question 89hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE components or protocols are involved in establishing and maintaining a FortiGate High Availability (HA) cluster using FGCP? (Choose three.)

Question 90easymulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO protocols can be enabled on a FortiGate interface for secure administrative access? (Choose two.)

Question 91mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO threat intelligence services or features are delivered dynamically by the FortiGuard network? (Choose two.)

Question 92hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE parameters must be configured identically on both peers to successfully establish an IPsec Phase 1 tunnel? (Choose three.)

Question 93easymulti select

Which TWO logging destinations can receive log data from a FortiGate firewall? (Choose two.)

Question 94mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO features or protocols are used in Fortinet SD-WAN deployments to optimize multi-path traffic routing? (Choose two.)

Question 95easymultiple choice

An administrator is setting up a FortiGate firewall and needs to define the security posture for traffic flowing from the internal network to the external Internet. Which object type should the administrator configure to enforce unified threat management features such as Antivirus, Web Filtering, and Intrusion Prevention on that traffic?

Question 96hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which THREE actions can a FortiGate Web Filtering profile take when a user attempts to access a website belonging to a blocked category? (Choose three.)

Question 97easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Within the Fortinet Security Fabric architecture, what is the primary role of an upstream FortiGate device acting as the root node compared to downstream internal segmentation firewalls?

Question 98mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An enterprise network architect is designing a site-to-site VPN architecture to connect a branch office to headquarters using FortiGate devices. The branch office relies on a dynamic broadband connection with a frequently changing public IP address. Which VPN configuration approach should be implemented?

Question 99mediummultiple choice

A network administrator notices that a web filtering profile configured on a FortiGate is blocking a specific educational video streaming category, but the exception list needs to allow a single permitted URL within that category. Where in FortiOS should the administrator add this specific URL override?

Question 100hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An administrator is troubleshooting a scenario where internal users can browse safe websites, but HTTPS inspection using certificates is throwing browser security warnings for certain internal web applications. What is the most likely cause of this behavior when using Deep Packet Inspection (DPI) on FortiGate?

Question 101mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A security analyst is investigating a security alert generated by FortiGate Intrusion Prevention System (IPS). The log indicates that a known exploit signature was detected and dropped. How does FortiGate IPS inspect network traffic to identify such patterns?

Question 102hardmultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

An organization is deploying FortiClient Endpoint Management Server (EMS) alongside FortiGate to enforce Zero Trust Network Access (ZTNA). A remote user's laptop connects to an unsecured public Wi-Fi hotspot. How does the Fortinet ZTNA solution ensure secure application access for this user without establishing a traditional full-tunnel VPN?

Question 103easymultiple choice

An administrator needs to ensure that internal network users cannot bypass corporate security policies by using unauthorized peer-to-peer file sharing or gaming applications. Which FortiGate security feature is specifically designed to identify and take action against these types of network protocols?

Question 104mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO of the following statements correctly describe core concepts of the Fortinet Security Fabric? (Choose two.)

Question 105hardmulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

When configuring firewall policies on a FortiGate device, an administrator must define matching criteria and actions. Which THREE elements are mandatory components of a standard IPv4 firewall policy in FortiOS? (Choose three.)

Question 106mediummulti select

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

Which TWO of the following characteristics differentiate SSL VPN from IPsec VPN when deploying remote access solutions on a FortiGate? (Choose two.)

Question 107hardmulti select

An administrator is hardening endpoint security using FortiClient and FortiGate integration. Which THREE core security functions can be enforced through this endpoint-to-firewall integration? (Choose three.)

Question 108mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A network administrator is deploying FortiGate next-generation firewalls at the perimeter and wants to inspect encrypted traffic for malware without breaking user privacy for banking and healthcare sites. The administrator plans to use SSL inspection but needs to avoid decrypting sensitive categories. Which FortiGate feature should be used to selectively bypass decryption for specific website categories?

Question 109easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A security analyst is reviewing logs from a FortiGate and notices numerous entries indicating that traffic from the internal network to a specific external IP is being blocked by a firewall policy. The analyst wants to quickly identify which firewall policy is responsible for the block. Which FortiGate log field should the analyst examine to find the policy ID that matched the traffic?

Question 110easymultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A network administrator at a branch office is deploying a FortiGate 60F and wants to provide a single, unified dashboard that shows the real-time status of all Fortinet devices in the branch, including the FortiSwitch and FortiAP. Which Fortinet feature should the administrator enable to discover and display these devices automatically?

Question 111mediummultiple choice

Read the full Nse 2 Technical Introduction TO Fortinet Security explanation →

A security administrator is configuring a FortiGate to inspect traffic for malicious files. The administrator wants to ensure that files are analyzed in a sandbox environment to detect zero-day threats. Which Fortinet product should be integrated with the FortiGate to provide this sandboxing capability?

Question 112mediummultiple choice