FORTINET-NSE56 Nse6 Security Fabric Specialist Topics Practice Test 4 — 15 Questions

Question 1

Which TWO of the following are valid methods for FortiAuthenticator to receive user information from an external source?

Accepted Answer

SAML. LDAP and SAML are standard protocols used by FortiAuthenticator to sync or authenticate users.

Answer

SNMP Traps

Answer

ICMP

Answer

HTTP Proxy

Question 2

Which THREE are key benefits of using FortiWeb to protect web applications?

Accepted Answer

Protection against SQL Injection. FortiWeb protects against injection, provides SSL offloading, and offers compliance reporting.

Answer

Replacing the ISP

Answer

Physical security of the server room

Question 3

Which TWO methods are used to share user group information in the Security Fabric?

Accepted Answer

SSO. SSO and LDAP group synchronization are primary ways user metadata is propagated in the Fabric.

Answer

VLAN tagging

Answer

DHCP option 43

Answer

DNS records

Question 4

Which TWO parameters must match between the FortiAuthenticator and the FortiGate when configuring RADIUS authentication?

Accepted Answer

Server IP Address. Shared secret and server IP address are essential for RADIUS communication.

Answer

RADIUS port

Answer

Device MAC address

Answer

System hostname

Question 5

Which THREE options are available for the 'Action' setting in a FortiWeb WAF policy?

Accepted Answer

Block. Standard actions include blocking, alerting, and monitoring traffic.

Answer

Encrypt

Answer

Bypass

Question 6

Which TWO products provide identity-based security within the Fortinet portfolio?

Accepted Answer

FortiGate. FortiGate and FortiAuthenticator work together to provide identity-based access control.

Answer

FortiSwitch

Answer

FortiAP

Answer

FortiADC

Question 7

Which THREE objects are required to configure a basic load balancing setup in FortiADC?

Accepted Answer

Virtual Server. Load balancing requires a real server, a server pool, and a virtual server to bind them.

Answer

WAF Policy

Answer

Content Routing Policy

Question 8

Which THREE elements are essential to define a user in FortiAuthenticator?

Accepted Answer

Group Membership. Username, password (or authentication method), and group membership are fundamental.

Answer

Home address

Answer

Operating System Version

Question 9

Which TWO are common causes for a 'Security Fabric' connection failure between FortiGate and FortiAnalyzer?

Accepted Answer

Incorrect IP/Port connectivity. Network reachability and mismatched credentials/certificates are the most common causes for connection drops.

Answer

Keyboard layout mismatch

Answer

Outdated browser

Answer

High CPU on FortiGate

Question 10

You are configuring a FortiWeb WAF policy to protect a web application. Which inspection mode is most effective for blocking SQL injection attacks while minimizing false positives in a production environment?

Accepted Answer

Prevention mode with signature-based scanning enabled. Detection mode is for logging, while Prevention mode blocks attacks. Signature-based scanning is the standard for identifying known SQL injection patterns.

Answer

Offline mode with learning enabled

Answer

Transparent mode with only DoS prevention

Answer

Detection mode with no signatures

Question 11

When adding a FortiWeb appliance to the Security Fabric, what is the primary prerequisite that must be met on the FortiGate?

Accepted Answer

Enable the Security Fabric connector on the FortiGate. The FortiGate acts as the root of the Security Fabric and must allow the FortiWeb to join via the Fabric connector settings.

Answer

Configure static routing between the devices

Answer

Disable all firewall policies

Answer

Manually create an IPsec tunnel between devices

Question 12

In a FortiADC deployment, you need to ensure that the load balancer terminates SSL connections from clients and initiates a new connection to the backend server. Which feature should you configure?

Accepted Answer

SSL Offloading. SSL Offloading (or SSL Termination) allows the FortiADC to decrypt the traffic, inspect it, and then re-encrypt it before sending it to the backend.

Answer

Server Persistence

Answer

HTTP Header Insertion

Answer

Layer 4 Load Balancing

Question 13

You are integrating FortiAuthenticator with a FortiGate to provide SSO for VPN users. The users are successfully authenticating against AD, but they are not being assigned the correct group-based firewall policies. What is the most likely cause?

Accepted Answer

RADIUS VSAs are not correctly configured to include group information. FortiAuthenticator must pass the group membership information to the FortiGate via the RADIUS VSA (Vendor Specific Attribute) or FSSO, and the FortiGate must be configured to map these groups.

Answer

The FortiGate is not joined to the AD domain

Answer

The VPN tunnel is using IKEv1 instead of IKEv2

Answer

The FortiAuthenticator is in local authentication mode

Question 14

You are troubleshooting a scenario where FortiADC is failing to perform health checks on a backend server. Which log should you prioritize to identify the specific reason for the health check failure?

Accepted Answer

System Event Logs. The FortiADC system logs, specifically those related to health check events, provide details on why a node is marked as down.

Answer

Session Table Logs

Answer

Application Traffic Logs

Answer

Security Policy Logs

Answer

SNMP Traps

Question 15

A user is attempting to authenticate via a FortiAuthenticator-backed portal but receives an 'Access Denied' message. The user exists in the AD group mapped to the policy. What should you check first?

Accepted Answer

FortiAuthenticator Authentication Logs. Checking the FortiAuthenticator authentication logs reveals if the credential was rejected or if the policy match failed.

Answer

The AD domain controller's disk space

Answer

The FortiGate session table

Answer

The WAF policy on FortiWeb