Nse6 Security Fabric Specialist Topics

You are configuring FortiWeb in reverse proxy mode. A client is receiving 403 Forbidden errors for legitimate traffic due to a SQL injection false positive. Which feature should you modify to allow this traffic while maintaining security?

You are deploying FortiWeb in a cloud environment. You need to ensure the WAF learns legitimate user behavior. Which mode should you start in to avoid blocking legitimate traffic?

You have multiple FortiADC nodes in a High Availability (HA) cluster. Which synchronization method ensures that the session table is shared between nodes to prevent user disconnects during a failover?

FortiAuthenticator is acting as a SAML Service Provider for a FortiGate. Users are failing to authenticate. Where should you check the logs to determine if the SAML assertion was received and parsed correctly?

Which TWO of the following steps are required to integrate FortiAuthenticator with a FortiGate for RADIUS authentication?

In the context of the Security Fabric, what is a 'root' FortiGate?

Which service does FortiAuthenticator provide to enable centralized management of user identities?

Which THREE objects are required to configure a basic load balancing setup in FortiADC?

Which TWO products provide identity-based security within the Fortinet portfolio?

In a FortiWeb high-availability cluster, how are the synchronization settings for SSL certificates managed?

You have a cluster of FortiWebs. You need to ensure that the session table is shared among members. What is this feature called?

What is the function of the FortiGate's 'Security Fabric' connector?

You are deploying FortiWeb in 'Reverse Proxy' mode. Where should the default gateway of the backend web servers point?

When integrating FortiAuthenticator with a Windows Active Directory, why is it recommended to use a service account with limited privileges?

You are troubleshooting a scenario where FortiADC is failing to perform health checks on a backend server. Which log should you prioritize to identify the specific reason for the health check failure?

Which TWO of the following are true regarding FortiADC's ability to perform Layer 7 load balancing?

Which THREE types of logs can be generated by FortiWeb?

What is the primary function of the Security Fabric's 'Automation Stitch' feature?

A FortiADC is deployed to load balance SMTP traffic. Which health check type should be used?

Which TWO actions can be automated via a FortiGate Automation Stitch?

What is the purpose of the 'Security Fabric' dashboard on the FortiGate?

What is the benefit of using FortiAnalyzer in the Security Fabric?

Which THREE options are available for the 'Action' setting in a FortiWeb WAF policy?

A FortiADC is reporting 'Server Busy' for a pool member. What does this indicate?

In the context of FortiAuthenticator, what does 'SSO' stand for?

In a FortiADC deployment, you need to ensure that the load balancer terminates SSL connections from clients and initiates a new connection to the backend server. Which feature should you configure?

Which THREE of the following are components of the Fortinet Security Fabric that can provide telemetry or data to the FortiGate?

Which identity provider type is most recommended for multi-factor authentication (MFA) within FortiAuthenticator?

Which TWO are common causes for a 'Security Fabric' connection failure between FortiGate and FortiAnalyzer?

In a FortiADC environment, you are implementing a Layer 7 load balancing rule. You need to rewrite the HTTP request header 'X-Forwarded-For' to include the client IP address. Which tool should you use?

You are troubleshooting a FortiADC health check. The health check is failing even though the server is up. What should you verify first?

Which THREE features are provided by the FortiADC when acting as an application delivery controller?

You are integrating FortiAuthenticator with a FortiGate to provide SSO for VPN users. The users are successfully authenticating against AD, but they are not being assigned the correct group-based firewall policies. What is the most likely cause?

You need to implement a persistence method in FortiADC where the user is tied to the server based on the cookie provided by the backend application. Which method do you choose?

Which TWO of the following are valid ways for FortiAuthenticator to receive user authentication requests?

Which component of the FortiADC performs the translation between the virtual IP and the real server IP?

You are configuring a FortiADC virtual server with SSL offloading. The backend servers require the original client IP to be preserved. What feature do you enable?

A developer wants to use a REST API to configure FortiADC objects. Where can you find the documentation and schema for the FortiADC API?

Which TWO parameters must match between the FortiAuthenticator and the FortiGate when configuring RADIUS authentication?

What is the primary function of the 'FortiToken'?

Which THREE elements are essential to define a user in FortiAuthenticator?

On FortiWeb, which component is used to inspect traffic for protocol-specific attacks like HTTP Request Smuggling?

When integrating FortiWeb with FortiAnalyzer, which information is passed to FortiAnalyzer?

Which FortiWeb feature is best used to detect 'Brute Force' attacks against a login page?

Which FortiAuthenticator feature allows you to map LDAP groups to local FortiAuthenticator groups for administrative access?

In the Security Fabric, which protocol is primarily used for communication between the FortiGate and the FortiAnalyzer?

FortiADC is configured with a Layer 7 policy. You notice that the persistence is failing for a specific application. Which persistence method is most appropriate for a cookie-based application?

You are configuring a FortiWeb WAF policy to protect a web application. Which inspection mode is most effective for blocking SQL injection attacks while minimizing false positives in a production environment?

You need to export logs from FortiAuthenticator to a remote syslog server. Which configuration path allows you to define this destination?

When adding a FortiWeb appliance to the Security Fabric, what is the primary prerequisite that must be met on the FortiGate?

You are integrating FortiWeb with FortiAnalyzer. What is the benefit of this integration in a Security Fabric context?

A user is attempting to authenticate via a FortiAuthenticator-backed portal but receives an 'Access Denied' message. The user exists in the AD group mapped to the policy. What should you check first?

When using FortiAuthenticator to provide RADIUS authentication for a third-party VPN gateway, which setting must match between the two devices?

Which THREE actions can be performed by a FortiWeb appliance when it detects a violation in a web request?

Which TWO of the following are valid methods for FortiAuthenticator to receive user information from an external source?

Which TWO of the following are primary functions of a Web Application Firewall (WAF) like FortiWeb?

You are implementing a WAF policy for a web application. Which profile should you use to prevent the disclosure of sensitive server-side information in error messages?

What is the primary benefit of the Security Fabric's 'Automation Stitch' feature?

A FortiADC deployment is experiencing high latency for HTTPS traffic. You suspect the SSL handshake is the bottleneck. Which tool in FortiADC is best suited to verify the SSL negotiation time?

Which TWO methods are used to share user group information in the Security Fabric?

You are configuring a FortiWeb policy to protect a web application. You need to ensure that the WAF blocks SQL injection attempts while allowing legitimate traffic. Which operational mode should you configure in the server policy?

Which object in FortiWeb is used to define the specific web server or virtual host that the WAF should inspect?

Which THREE of the following are core components of the Fortinet Security Fabric?

Which THREE items are required to successfully integrate a FortiAuthenticator with an Active Directory (AD) environment for identity-based policies?

You are configuring a FortiWeb WAF policy for a web application. You need to ensure that the WAF blocks requests that contain SQL injection patterns. Which feature should you enable in the WAF profile?

Which component of the FortiAuthenticator is responsible for the self-service portal where users can manage their own two-factor authentication tokens?

A FortiADC is load balancing an HTTPS application. You need to offload SSL processing to the ADC to reduce server load. What is the correct object to configure for this?

Which THREE are key benefits of using FortiWeb to protect web applications?

A user authenticated via FortiAuthenticator is unable to access a resource protected by a FortiGate policy. The policy uses the user's LDAP group. What is the most likely cause?

Which FortiWeb feature allows you to block traffic based on the geographic origin of the IP address?

Which of the following is a component of the Fortinet Security Fabric?

In the Security Fabric, which feature allows the FortiGate to automatically quarantine a host that is identified as compromised by another Fabric device?

Which THREE features are provided by FortiAuthenticator when integrated into a Security Fabric to enforce identity-based access?

You are debugging a SAML authentication issue where FortiAuthenticator is the IDP. The logs show 'Assertion expired'. What is the most likely cause?

You are setting up a FortiGate Security Fabric. How do you authorize a downstream FortiSwitch to be managed by the FortiGate?