FORTINET-NSE123 Nse 2 Technical Introduction TO Fortinet Security Practice Test 4 — 15 Questions

Question 1

An administrator wants to prevent users from uploading confidential company documents to external cloud storage websites. Which Fortinet security profile feature inspects outbound traffic for specific file types or sensitive keywords?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Data Loss Prevention (DLP) sensor. Data Loss Prevention (DLP) sensors inspect traffic for sensitive data signatures, file types, and keywords to prevent data exfiltration.

Answer

Intrusion Prevention System (IPS) sensor

Answer

Antivirus profile

Answer

Web filtering profile

Question 2

An administrator wants to view a chronological log of security threats and blocked virus events in real-time directly on the FortiGate GUI. Which FortiOS feature provides this live graphical and tabular logging interface?

Accepted Answer

FortiView dashboards. FortiView provides real-time and historical dashboards for monitoring sessions, bandwidth, applications, and security threats.

Answer

Firmware upgrade wizards

Answer

HA cluster status monitors

Answer

Static routing summary tables

Question 3

An administrator is configuring a FortiGate firewall and needs to ensure that packets matching an explicit allow policy are also logged. Where should the administrator enable logging for this specific policy?

Accepted Answer

Inside the specific firewall policy rule settings under Log Allowed Traffic. Log settings for a firewall policy (such as logging all sessions or security events) are configured directly inside the individual firewall policy rule parameters.

Answer

Inside the static route next-hop configuration

Answer

Within the physical interface administrative access profile

Answer

Under the global system time zone and NTP settings

Question 4

What is the primary purpose of a firewall address group in FortiOS?

Accepted Answer

To group multiple address objects together for simplified firewall policy configuration. Firewall address groups combine multiple individual address objects into a single group, simplifying policy management when rules apply to multiple hosts or subnets.

Answer

To assign dynamic VLAN tags to switch ports

Answer

To configure VPN Phase 1 encryption transforms

Answer

To schedule automated system backup intervals

Question 5

An administrator needs to restrict administrative access to the FortiGate CLI and GUI so that management connections are only accepted from a specific trusted internal management workstation subnet. Where is this source IP restriction configured?

Accepted Answer

On the administrator user account configuration (Trusted Hosts). Trusted hosts can be defined on administrator user accounts to ensure management access is only permitted from specified source IP addresses.

Answer

Within the FortiGuard subscription server list

Answer

Inside the DHCP server IP pool range

Answer

Inside the global DNS server settings

Question 6

When configuring an IPsec VPN tunnel between two FortiGate units, what is the function of Dead Peer Detection (DPD)?

Accepted Answer

To detect unresponsive VPN peers and tear down dead security associations. DPD detects dead or unresponsive VPN peers by periodically sending hello/acknowledgment probes, allowing the FortiGate to tear down stale security associations and re-establish the tunnel.

Answer

To authenticate administrators logging into the FortiGate GUI via RADIUS

Answer

To balance outbound traffic across multiple WAN interfaces using SD-WAN

Answer

To encrypt user data payloads using AES-256 algorithms

Question 7

What is the primary function of FortiSandbox in an enterprise security architecture?

Accepted Answer

To analyze unknown files and zero-day malware in an isolated virtual environment. FortiSandbox runs suspicious, unknown files in an isolated virtual environment to observe their behavior and detect zero-day malware.

Answer

To filter web browsing categories and block malicious URLs

Answer

To centralize log storage and generate graphical compliance reports

Answer

To authenticate remote SSL VPN users against Active Directory

Question 8

An administrator wants to ensure that all configuration changes made on a FortiGate are tracked with specific user accountability and revision history. Which Fortinet management tool provides centralized configuration revision control and rollback capabilities?

Accepted Answer

FortiManager. FortiManager maintains centralized configuration revisions, audit trails, and allows administrators to roll back changes to previous known-good states.

Answer

FortiAnalyzer

Answer

FortiClient EMS

Answer

FortiAuthenticator

Question 9

When configuring dynamic routing on a FortiGate using OSPF, what is the purpose of defining OSPF areas?

Accepted Answer

To divide routing domains hierarchically, reducing routing overhead and limiting link-state update traffic. OSPF areas divide large autonomous systems into smaller logical hierarchical segments to reduce routing table size, limit link-state update propagation, and optimize convergence.

Answer

To balance SSL VPN tunnel connections across multiple cluster nodes

Answer

To assign IP addresses dynamically to connected client workstations

Answer

To encrypt firewall policy rules between different physical interfaces

Question 10

What is the primary function of a FortiGate firewall policy action set to 'Accept'?

Accepted Answer

To permit matching traffic to traverse the FortiGate. When a packet matches a firewall policy with an action of 'Accept', the FortiGate permits the traffic to pass through the device toward its destination.

Answer

To redirect the user browser to a captive portal authentication page

Answer

To encapsulate the packet inside an IPsec VPN tunnel

Answer

To drop the matching packet silently without logging

Question 11

An administrator wants to block specific types of USB or removable storage devices from connecting to corporate laptops. Which Fortinet component manages endpoint device control policies?

Accepted Answer

FortiClient EMS Device Control profile. FortiClient EMS enforces endpoint security policies, including vulnerability scanning, web filtering, and device control (USB blocking).

Answer

FortiGate Antivirus profile

Answer

FortiSwitch port security settings

Answer

FortiAnalyzer reporting engine

Question 12

An organization is deploying an SD-WAN architecture on a FortiGate. When multiple WAN interfaces are combined into an SD-WAN zone, how do firewall policies reference the destination or source of the traffic?

Accepted Answer

Firewall policies reference the SD-WAN zone name instead of individual physical interfaces. Once physical WAN interfaces are added to an SD-WAN zone, firewall policies reference the SD-WAN zone name instead of individual physical interfaces.

Answer

Firewall policies must only use static routing next-hop IP addresses

Answer

Firewall policies are disabled entirely when SD-WAN is enabled

Answer

Firewall policies must reference every physical WAN interface individually in separate rules

Question 13

What is the primary function of a FortiGate static route?

Accepted Answer

To manually specify the next-hop gateway for routing traffic to specific destination networks. A static route manually defines the next-hop IP gateway for specific destination subnets when packets cannot be resolved by directly connected interfaces.

Answer

To translate private internal IP addresses to public WAN IP addresses

Answer

To inspect HTTP web traffic for malicious scripts

Answer

To authenticate remote VPN users against Active Directory

Question 14

An administrator notices that a FortiGate high availability (HA) cluster has experienced a failover. Which log category on the FortiGate or FortiAnalyzer should the administrator check to investigate the cause of the HA state transition?

Accepted Answer

Event logs (System Event logs). Event logs contain system-level events, including HA cluster state transitions, configuration changes, and administrator logins.

Answer

Antivirus quarantine logs

Answer

Web filtering browsing logs

Answer

DHCP lease assignment logs

Question 15

When configuring an SSL VPN portal on a FortiGate, what is the primary operational difference between SSL VPN Web Mode and Tunnel Mode?

Accepted Answer

Web mode is browser-based with bookmarks, while tunnel mode assigns a virtual IP and requires FortiClient. Web mode provides clientless access via a web browser using bookmarks, whereas tunnel mode assigns a virtual IP address and uses FortiClient to provide full network layer access.

Answer

Web mode encrypts traffic with IPsec, while tunnel mode uses unencrypted HTTP connections

Answer

Tunnel mode only supports Windows XP, while web mode supports modern mobile browsers

Answer

Web mode requires a hardware FortiToken, while tunnel mode requires no authentication