FORTINET-NSE56 Nse6 Security Fabric Specialist Topics Practice Test 3 — 15 Questions

Question 1

You have a cluster of FortiWebs. You need to ensure that the session table is shared among members. What is this feature called?

Accepted Answer

Session Synchronization. Session synchronization is required in clusters to maintain state if a failover occurs.

Answer

Persistence Sharing

Answer

State Replication

Answer

Configuration Sync

Question 2

A developer wants to use a REST API to configure FortiADC objects. Where can you find the documentation and schema for the FortiADC API?

Accepted Answer

In the API Explorer within the FortiADC GUI. The API documentation is accessible directly through the FortiADC web interface.

Answer

On the FortiGuard portal

Answer

In the CLI reference guide

Answer

By calling technical support

Question 3

You are debugging a SAML authentication issue where FortiAuthenticator is the IDP. The logs show 'Assertion expired'. What is the most likely cause?

Accepted Answer

Time skew between IDP and SP. Time skew between the IDP and SP (Service Provider) is the most common cause of expired assertion errors.

Answer

The browser is blocked

Answer

The SAML certificate is self-signed

Answer

The user password is too old

Question 4

You are implementing a WAF policy for a web application. Which profile should you use to prevent the disclosure of sensitive server-side information in error messages?

Accepted Answer

Data Leak Prevention profile. The Leak Detection or Information Disclosure profile masks sensitive data like stack traces in error messages.

Answer

XSS profile

Answer

SQL Injection profile

Answer

Cookie security profile

Question 5

In the context of the Security Fabric, what is a 'root' FortiGate?

Accepted Answer

The device that controls the Fabric and collects telemetry. The root FortiGate is the top-level management device that orchestrates other members in the Fabric.

Answer

The firewall with the most ports

Answer

The oldest firewall in the office

Answer

A virtual appliance

Question 6

Which service does FortiAuthenticator provide to enable centralized management of user identities?

Accepted Answer

Identity and Access Management (IAM). FortiAuthenticator serves as an LDAP/RADIUS server for centralized credential management.

Answer

Packet filtering

Answer

Load balancing

Answer

Web application firewalling

Question 7

A FortiADC is reporting 'Server Busy' for a pool member. What does this indicate?

Accepted Answer

The server has reached its max connection limit. The 'Server Busy' status usually means the server has reached its connection limit as defined in the server object.

Answer

The server is rejected by the health check

Answer

The server is down

Answer

The ADC is experiencing high CPU

Question 8

What is the primary function of the 'FortiToken'?

Accepted Answer

Two-factor authentication (2FA). FortiToken provides a secondary factor for authentication, enhancing account security.

Answer

User database management

Answer

Secure storage for passwords

Answer

VPN encryption

Question 9

Which FortiWeb feature is best used to detect 'Brute Force' attacks against a login page?

Accepted Answer

Rate Limiting / Thresholds. Threshold rules are used to limit the number of attempts within a specific window of time.

Answer

IP Reputation

Answer

Cookie signing

Answer

SQL Injection protection

Question 10

You are configuring a FortiADC virtual server with SSL offloading. The backend servers require the original client IP to be preserved. What feature do you enable?

Accepted Answer

X-Forwarded-For header insertion. The X-Forwarded-For header is the standard way to inject the client IP into the HTTP request headers for the backend server.

Answer

HTTP compression

Answer

SSL session resumption

Answer

Source IP NAT

Question 11

When integrating FortiAuthenticator with a Windows Active Directory, why is it recommended to use a service account with limited privileges?

Accepted Answer

To adhere to the principle of least privilege. Following the principle of least privilege ensures that the compromise of the service account does not compromise the entire domain.

Answer

To allow easier backup

Answer

To increase speed

Answer

To bypass password expiration

Question 12

Which THREE of the following are core components of the Fortinet Security Fabric?

Accepted Answer

FortiGate. FortiGate, FortiAnalyzer, and FortiManager are the primary pillars of the Security Fabric.

Answer

Standard Web Browser

Answer

Third-party printer

Question 13

Which THREE features are provided by the FortiADC when acting as an application delivery controller?

Accepted Answer

Layer 7 Load Balancing. FortiADC provides load balancing, WAF capabilities, and global traffic management.

Answer

Email routing

Answer

DHCP server

Question 14

Which TWO actions can be automated via a FortiGate Automation Stitch?

Accepted Answer

Quarantine a host. Automation stitches commonly trigger alerts (email/logs) or network actions (quarantine).

Answer

Modify the BIOS settings

Answer

Purchase hardware

Answer

Perform a software update on a server

Question 15

Which THREE types of logs can be generated by FortiWeb?

Accepted Answer

Event Log. FortiWeb logs include traffic, attack, and system events for comprehensive auditing.

Answer

Packet Capture Log

Answer

User Billing Log