NSE6 Dumps NSE6 Braindumps
NSE6 Real Questions NSE6 Practice Test NSE6 Actual Questions
Fortinet Network Security Expert 6
https://killexams.com/pass4sure/exam-detail/NSE6
Which of the following statements best describes the role of a DC agents in an FSSO DC?
Captures the login events and forward them to the collector agent.
Captures the user IP address and workstation name and forward that information to the FortiGate devices.
Captures the login and logoff events and forward them to the collector agent.
Captures the login events and forward them to the FortiGate devices.
Which of the following FSSO modes must be used for Novell eDirectory networks?
Agentless polling
LDAP agent
eDirectory agent
DC agent
In a FSSO agentless polling mode solution, where must the collector agent be?
In any Windows server
In any of the AD domain controllers
In the master AD domain controller
The FortiGate device polls the AD domain controllers
Which of the following statements are characteristics of a FSSO solution using advanced access mode? (Choose three.)
Protection profiles can be applied to both individual users and user groups
Nested or inherited groups are supported
Usernames follow the LDAP convention: CN=User, OU=Name, DC=Domain
Usernames follow the Windows convention: Domain\username
Protection profiles can be applied to user groups only.
Which of the following FSSO agents are required for a DC agent mode solution? (Choose two.)
FSSO agent
DC agent
Collector agent
Radius server
In a FSSO agent mode solution, how does the FSSO collector agent learn each IP address?
The DC agents get each user IP address from the event logs and forward that information to the collector agent
The collector agent does not know, and does not need, each user IP address. Only workstation names are known by the collector agent.
The collector agent frequently polls the AD domain controllers to get each user IP address.
The DC agent learns the workstation name from the event logs and DNS is then used to translate those names to the respective IP addresses.
Which FSSO agents are required for a FSSO agent-based polling mode solution?
Collector agent and DC agents
Polling agent only
Collector agent only
DC agents only
What configuration objects are automatically added when using the FortiGate's FortiClient VPN Configurations Wizard?(Choose two)
Static route
Phase 1
Users group
Phase 2
Which of the following statements are correct concerning layer 2 broadcast domains in transparent mode VDOMs?(Choose two)
The whole VDOM is a single broadcast domain even when multiple VLAN are used.
Each VLAN is a separate broadcast domain.
Interfaces configured with the same VLAN ID can belong to different broadcast domains.
All the interfaces in the same broadcast domain must use the same VLAN ID.
Which of the following statements is correct regarding FortiGate interfaces and spanning tree protocol? (Choose Two)
Only FortiGate switch interfaces Participate in spanning tree.
All FortiGate interfaces in transparent mode VDOMs participate in spanning tree.
All FortiGate interfaces in NAT/route mode VDOMs Participate in spanning tree.
All FortiGate interfaces in transparent mode VDOMs may block or forward BPDUs.
On your Forti Gate 60D, you've configured firewall policies. They port forward traffic to your Linux Apache web server. Select the best way to protect your web server by using
Enable IPS signatures for Linux servers with HTTP, TCP and SSL protocols and Apache applications. Configured DLP to block HTTP GET request with credit card numbers.
Enable IPS signatures for Linux servers with HTTP, TCP and SSL protocols and Apache applications. Configure DLP to block HTTP GET with credit card numbers. Also configure a DoS policy to prevent TCP SYn floods and port scans.
None. FortiGate 60D is a desktop model, which does not support IPS.
Enable IPS signatures for Linux and windows servers with FTP, HTTP, TCP, and SSL protocols and Apache and PHP applications.
Which changes to IPS will reduce resource usage and improve performance? (Choose three)
In custom signature, remove unnecessary keywords to reduce how far into the signature tree that FortiGate must compare in order to determine whether the packet matches.
In IPS sensors, disable signatures and rate based statistics (anomaly detection) for protocols, applications and traffic directions that are not relevant.
In IPS filters, switch from 'Advanced' to 'Basic' to apply only the most essential signatures.
In firewall policies where IPS is not needed, disable IPS.
In firewall policies where IPS is used, enable session start logs.
6$03/( 48(67,216
7KHVH TXHVWLRQV DUH IRU GHPR SXUSRVH RQO\ )XOO YHUVLRQ LV XS WR GDWH DQG FRQWDLQV DFWXDO TXHVWLRQV DQG DQVZHUV
.LOOH[DPV FRP LV DQ RQOLQH SODWIRUP WKDW RIIHUV D ZLGH UDQJH RI VHUYLFHV UHODWHG WR FHUWLILFDWLRQ H[DP SUHSDUDWLRQ 7KH SODWIRUP SURYLGHV DFWXDO TXHVWLRQV H[DP GXPSV DQG SUDFWLFH WHVWV WR KHOS LQGLYLGXDOV SUHSDUH IRU YDULRXV FHUWLILFDWLRQ H[DPV ZLWK FRQILGHQFH +HUH DUH VRPH NH\ IHDWXUHV DQG VHUYLFHV RIIHUHG E\ .LOOH[DPV FRP
$FWXDO ([DP 4XHVWLRQV .LOOH[DPV FRP SURYLGHV DFWXDO H[DP TXHVWLRQV WKDW DUH H[SHULHQFHG LQ WHVW FHQWHUV 7KHVH TXHVWLRQV DUH XSGDWHG UHJXODUO\ WR HQVXUH WKH\ DUH XS WR GDWH DQG UHOHYDQW WR WKH ODWHVW H[DP V\OODEXV %\ VWXG\LQJ WKHVH DFWXDO TXHVWLRQV FDQGLGDWHV FDQ IDPLOLDUL]H WKHPVHOYHV ZLWK WKH FRQWHQW DQG IRUPDW RI WKH UHDO H[DP
([DP 'XPSV .LOOH[DPV FRP RIIHUV H[DP GXPSV LQ 3') IRUPDW 7KHVH GXPSV FRQWDLQ D FRPSUHKHQVLYH FROOHFWLRQ RI TXHVWLRQV DQG DQVZHUV WKDW FRYHU WKH H[DP WRSLFV %\ XVLQJ WKHVH GXPSV FDQGLGDWHV FDQ HQKDQFH WKHLU NQRZOHGJH DQG LPSURYH WKHLU FKDQFHV RI VXFFHVV LQ WKH FHUWLILFDWLRQ H[DP
3UDFWLFH 7HVWV .LOOH[DPV FRP SURYLGHV SUDFWLFH WHVWV WKURXJK WKHLU GHVNWRS 9&( H[DP VLPXODWRU DQG RQOLQH WHVW HQJLQH 7KHVH SUDFWLFH WHVWV VLPXODWH WKH UHDO H[DP HQYLURQPHQW DQG KHOS FDQGLGDWHV DVVHVV WKHLU UHDGLQHVV IRU WKH DFWXDO H[DP 7KH SUDFWLFH WHVWV FRYHU D ZLGH UDQJH RI TXHVWLRQV DQG HQDEOH FDQGLGDWHV WR LGHQWLI\ WKHLU VWUHQJWKV DQG ZHDNQHVVHV
*XDUDQWHHG 6XFFHVV .LOOH[DPV FRP RIIHUV D VXFFHVV JXDUDQWHH ZLWK WKHLU H[DP GXPSV 7KH\ FODLP WKDW E\ XVLQJ WKHLU PDWHULDOV FDQGLGDWHV ZLOO SDVV WKHLU H[DPV RQ WKH ILUVW DWWHPSW RU WKH\ ZLOO UHIXQG WKH SXUFKDVH SULFH 7KLV JXDUDQWHH SURYLGHV DVVXUDQFH DQG FRQILGHQFH WR LQGLYLGXDOV SUHSDULQJ IRU FHUWLILFDWLRQ H[DPV
8SGDWHG &RQWHQW .LOOH[DPV FRP UHJXODUO\ XSGDWHV LWV TXHVWLRQ EDQN DQG H[DP GXPSV WR HQVXUH WKDW WKH\ DUH FXUUHQW DQG UHIOHFW WKH ODWHVW FKDQJHV LQ WKH H[DP V\OODEXV 7KLV KHOSV FDQGLGDWHV VWD\ XS WR GDWH ZLWK WKH H[DP FRQWHQW DQG LQFUHDVHV WKHLU FKDQFHV RI VXFFHVV
7HFKQLFDO 6XSSRUW .LOOH[DPV FRP SURYLGHV IUHH [ WHFKQLFDO VXSSRUW WR DVVLVW FDQGLGDWHV ZLWK DQ\ TXHULHV RU LVVXHV WKH\ PD\ HQFRXQWHU ZKLOH XVLQJ WKHLU VHUYLFHV 7KHLU FHUWLILHG H[SHUWV DUH DYDLODEOH WR SURYLGH JXLGDQFH DQG KHOS FDQGLGDWHV WKURXJKRXW WKHLU H[DP SUHSDUDWLRQ MRXUQH\
'PS .PSF FYBNT WJTJU IUUQT LJMMFYBNT DPN WFOEPST FYBN MJTU
.LOO \RXU H[DP DW )LUVW $WWHPSW *XDUDQWHHG