Nse6 Security Fabric Specialist Topics

You are configuring FortiWeb in reverse proxy mode. A client is receiving 403 Forbidden errors for legitimate traffic due to a SQL injection false positive. Which feature should you modify to allow this traffic while maintaining security?

You are deploying FortiWeb in a cloud environment. You need to ensure the WAF learns legitimate user behavior. Which mode should you start in to avoid blocking legitimate traffic?

You have multiple FortiADC nodes in a High Availability (HA) cluster. Which synchronization method ensures that the session table is shared between nodes to prevent user disconnects during a failover?

Which TWO of the following steps are required to integrate FortiAuthenticator with a FortiGate for RADIUS authentication?

In the context of the Security Fabric, what is a 'root' FortiGate?

Which service does FortiAuthenticator provide to enable centralized management of user identities?

Which THREE objects are required to configure a basic load balancing setup in FortiADC?

Which TWO products provide identity-based security within the Fortinet portfolio?

In a FortiWeb high-availability cluster, how are the synchronization settings for SSL certificates managed?

What is the function of the FortiGate's 'Security Fabric' connector?

You are deploying FortiWeb in 'Reverse Proxy' mode. Where should the default gateway of the backend web servers point?

When integrating FortiAuthenticator with a Windows Active Directory, why is it recommended to use a service account with limited privileges?

You are troubleshooting a scenario where FortiADC is failing to perform health checks on a backend server. Which log should you prioritize to identify the specific reason for the health check failure?

You are the network security analyst for a company that has FortiGates at the headquarters and at 12 branch offices, all managed by a central FortiManager. The company recently added a FortiAnalyzer appliance and wants to ensure that all Security Fabric devices send their logs to it. You have added the FortiAnalyzer to the root FortiGate's Security Fabric and enabled log forwarding. However, the branch FortiGates are not showing any logs on the FortiAnalyzer. What is the most likely reason?

Which TWO of the following are true regarding FortiADC's ability to perform Layer 7 load balancing?

Which THREE types of logs can be generated by FortiWeb?

What is the primary function of the Security Fabric's 'Automation Stitch' feature?

A FortiADC is deployed to load balance SMTP traffic. Which health check type should be used?

Which TWO actions can be automated via a FortiGate Automation Stitch?

What is the purpose of the 'Security Fabric' dashboard on the FortiGate?

What is the benefit of using FortiAnalyzer in the Security Fabric?

A FortiADC is reporting 'Server Busy' for a pool member. What does this indicate?

In the context of FortiAuthenticator, what does 'SSO' stand for?

In a FortiADC deployment, you need to ensure that the load balancer terminates SSL connections from clients and initiates a new connection to the backend server. Which feature should you configure?

Which THREE of the following are components of the Fortinet Security Fabric that can provide telemetry or data to the FortiGate?

In a FortiADC environment, you are implementing a Layer 7 load balancing rule. You need to rewrite the HTTP request header 'X-Forwarded-For' to include the client IP address. Which tool should you use?

You are troubleshooting a FortiADC health check. The health check is failing even though the server is up. What should you verify first?

Which THREE features are provided by the FortiADC when acting as an application delivery controller?

You are integrating FortiAuthenticator with a FortiGate to provide SSO for VPN users. The users are successfully authenticating against AD, but they are not being assigned the correct group-based firewall policies. What is the most likely cause?

You need to implement a persistence method in FortiADC where the user is tied to the server based on the cookie provided by the backend application. Which method do you choose?

Which TWO of the following are valid ways for FortiAuthenticator to receive user authentication requests?

Which component of the FortiADC performs the translation between the virtual IP and the real server IP?

A developer wants to use a REST API to configure FortiADC objects. Where can you find the documentation and schema for the FortiADC API?

What is the primary function of the 'FortiToken'?

When integrating FortiWeb with FortiAnalyzer, which information is passed to FortiAnalyzer?

Which FortiWeb feature is best used to detect 'Brute Force' attacks against a login page?

Which FortiAuthenticator feature allows you to map LDAP groups to local FortiAuthenticator groups for administrative access?

FortiADC is configured with a Layer 7 policy. You notice that the persistence is failing for a specific application. Which persistence method is most appropriate for a cookie-based application?

You are configuring a FortiWeb WAF policy to protect a web application. Which inspection mode is most effective for blocking SQL injection attacks while minimizing false positives in a production environment?

You are troubleshooting a Security Fabric deployment where a downstream FortiGate is not appearing in the Fabric topology on the root FortiGate. You have verified that the downstream FortiGate is configured with the correct root FortiGate IP and that network connectivity exists. Which action should you take next to resolve the issue?

You need to export logs from FortiAuthenticator to a remote syslog server. Which configuration path allows you to define this destination?

When adding a FortiWeb appliance to the Security Fabric, what is the primary prerequisite that must be met on the FortiGate?

You are integrating FortiWeb with FortiAnalyzer. What is the benefit of this integration in a Security Fabric context?

A user is attempting to authenticate via a FortiAuthenticator-backed portal but receives an 'Access Denied' message. The user exists in the AD group mapped to the policy. What should you check first?

When using FortiAuthenticator to provide RADIUS authentication for a third-party VPN gateway, which setting must match between the two devices?

You are configuring a Security Fabric with a root FortiGate and a downstream FortiGate. You want to ensure that if the root FortiGate fails, the downstream FortiGate can still provide security services and maintain Fabric connectivity. Which configuration should you implement?

Which THREE actions can be performed by a FortiWeb appliance when it detects a violation in a web request?

Which TWO of the following are primary functions of a Web Application Firewall (WAF) like FortiWeb?

You are implementing a WAF policy for a web application. Which profile should you use to prevent the disclosure of sensitive server-side information in error messages?

What is the primary benefit of the Security Fabric's 'Automation Stitch' feature?

A FortiADC deployment is experiencing high latency for HTTPS traffic. You suspect the SSL handshake is the bottleneck. Which tool in FortiADC is best suited to verify the SSL negotiation time?

You are configuring a FortiWeb policy to protect a web application. You need to ensure that the WAF blocks SQL injection attempts while allowing legitimate traffic. Which operational mode should you configure in the server policy?

Which THREE of the following are core components of the Fortinet Security Fabric?

You are configuring a FortiWeb WAF policy for a web application. You need to ensure that the WAF blocks requests that contain SQL injection patterns. Which feature should you enable in the WAF profile?

Which component of the FortiAuthenticator is responsible for the self-service portal where users can manage their own two-factor authentication tokens?

A FortiADC is load balancing an HTTPS application. You need to offload SSL processing to the ADC to reduce server load. What is the correct object to configure for this?

Which THREE are key benefits of using FortiWeb to protect web applications?

A user authenticated via FortiAuthenticator is unable to access a resource protected by a FortiGate policy. The policy uses the user's LDAP group. What is the most likely cause?

Which FortiWeb feature allows you to block traffic based on the geographic origin of the IP address?

Which of the following is a component of the Fortinet Security Fabric?

In the Security Fabric, which feature allows the FortiGate to automatically quarantine a host that is identified as compromised by another Fabric device?

Which THREE features are provided by FortiAuthenticator when integrated into a Security Fabric to enforce identity-based access?

You are debugging a SAML authentication issue where FortiAuthenticator is the IDP. The logs show 'Assertion expired'. What is the most likely cause?