NSE 3 FortiAuthenticator

Question 1

Which type of network user is the most commonly used gateway for external attacks?

Select one:

Internal users  

Partners

External users

IT admins

Question 2

Question text

FortiAuthenticator is available in which two form factors? (Choose two.)

Select one or more:

Virtual machine (VM) version  

Two hardware appliances scalable from 250 to 10,000 users

Four hardware appliances scalable from 400 to 5,000 users

Five hardware appliances scalable from 500 to 40,000 users  

Question 3

Which three features are high availability features of FortiAuthenticator? (Choose three.)

Select one or more:

Active-Active clustering  

Build-in uninterruptible power supply (UPS)

Hardware appliances with redundant power supplies  

Cluster file system

Active-Passive clustering  

Question 4

Which product category best describes FortiAuthenticator?

Select one:

Database Management

Firewall Management

Web Application Management

Identity Management  

Question 5

Which three major functions does FortiAuthenticator provide? (Choose three.)

Select one or more:

Malware detection and remediation via FortiGuard labs

Access to wired and wireless networks  

Scalable VPN through custom FortiASIC hardware acceleration

Secure access with two-factor authentication and X.509  

Identity management, enabling identity-based security policies  

Question 6

When using FortiAuthenticator, how are X.509 certificates managed?

Select one:

By using the build-in Certificate Authority function  

By exporting the private keys to a spreadsheet at scheduled intervals

By having each authorized user manage their own certificates

By using an external, third party certificate service provider

Question 7

FortiAuthenticator supports Fortinet Single Sign-On (FSSO) with FortiGate, FortiClient, FortiMail, and FortiCache to accomplish which goal?

Select one:

Enable FortiASIC hardware acceleration based on identity

Detect malware being propagated from an individual user

Allow users to log in once to multiple applications

Identify users and apply identity-based security policies  

Question 8

How does FortiAuthenticator serve to enable WiFi access?

Select one:

By auto-selecting the best WiFi radio channels

By detecting rogue Aps and blocking access to them

By providing centralized WiFi authentication  

By displaying real-time RF heat maps

Question 9

Authentication with simple passwords can be weak. How does FortiAuthenticator solve this problem?

Select one:

Security questions

Single sign-on

One-time pads

Two-factor authentication  

Question 10

FortiAuthenticator supports self-service registration, social authentication, and pre-defined access codes for which purpose?

Select one:

FortiGate administrative access

Guest user access  

Malware detection

Two-factor sign-on

Bottom of Form

Bottom of Form

Bottom of Form

Dapat Nilai 100

NSE 3 FortiSIEM

Question 1

For a SIEM to work effectively it must detect the network topology and the devices connected to it. How does FortiSIEM accomplish this?

Select one:

By initially entering the data manually and sending email reminders to administrators to update for any changes

By initially entering the data manually and relying on manual updates as the environment changes

By using a live import engine for AutoCAD drawings and Visio diagrams

By using a built-in self-learning, real-time asset discovery and device configuration engine 

Question 2

What is the major benefit of the FortiSIEM ability to cross-correlate data from sources each traditionally isolated to the NOC or SOC?

Select one:

FortiSIEM can identify which department is at fault.

FortiSIEM can isolate network device configuration errors.

FortiSIEM can report on IT staff effectiveness.

FortiSIEM can more quickly identify threats. 

Question 3

FortiSIEM has APIs to collect data from which types of sources?

Select one:

Fortinet switches, routers, and firewalls only.

A large list of sources from a large list of vendors. 

A small list of sources from a few vendors.

Switches, routers, and firewalls from the major vendors.

Question 4

Typically, NOC and SOC teams operate independently with different toolsets. What risk does this pose?

Select one:

It can increase the communications effectiveness during a crisis.

It can diminish previous team-building efforts.

It increases the time necessary to detect breaches. 

It can highlight discrepancies in the data.

Question 5

How does FortiSIEM support multi-tenancy?

Select one:

It allows enterprises and managed service providers to create partitioned reporting domains. 

It allows multiple customers to share the same network infrastructure.

It provides support for FortiSIEM to analyse cloud-based resources.

It allows multiple instances of FortiSIEM to be used on the same network simultaneously.

Question 6

In a recent survey, how long did IT professionals report it took to detect a breach, on average?

Select one:

13 days

256 days 

2.5 years

8 hours

Question 7

Gartner defines the “critical capabilities” required of a complete SIEM solution. How does FortiSIEM compare to these criteria?

Select one:

FortiSIEM almost meets Gartner's definition.

FortiSIEM goes far beyond Gartner's definition. 

FortiSIEM exactly meets Gartner's definition.

FortiSIEM meets 50% of Gartner's definition.

Question 8

How can compliance reporting information be obtained from FortiSIEM?

Select one:

By installing the FortiSIEM Compliance add-on module

By utilizing professional services to build compliance reports

By using any of the hundreds of built-in customizable compliance reports

By dumping the FortiSIEM databases and importing into your favourite reporting tool 

Question 9

What is a key overarching function of SIEMs?

Select one:

Support Fortinet Single Sign-On with FortiGate and FortiClient

Contains breaches to specific vendors to reduce propagation

Address external and internal breaches with a single product

Monitor conformity with regulatory and compliance requirements 

Question 10

Which two main pain points do organizations face that are addressed by FortiSIEM? (Choose two.)

Select one or more:

Economic and reputational loss from data breaches

Lack of visibility into the network 

Weak regulatory standards and network monitoring requirements

Labour-intensive manual investigations of security events

Dapat nilai 90

NSE 3 FortiADC

Question 1

Which market segments does FortiADC support?

Select one:

Enterprise, MSSPs, Carriers

SMB only

Carriers only

Entry and SMB, Mid-Range, Enterprise 

Question 2

Which of the following FortiGuard Services are available for FortiADC? (Choose three.)

Select one or more:

Web Filtering 

IOC

Mobile Security Service

IP Reputation 

WAF Security Service 

Question 3

How does the FortiADC Global Server Load Balancing feature route traffic to different data centers?

Select one:

It automatically contacts the customer's ISP to request the rerouting of traffic to another location.

It provides users with an application to download that redirects them to other servers.

It initiates multiple VM instances on cloud services that accept traffic until the data center is restored. 

It uses DNS-based routing to automatically direct users to other data centers if a data center is offline.

Question 4

What does the FortiADC Server Load Balancing feature do if an application server fails?

Select one:

It alerts users that the application is down and to try again later.

It detects that the server is not available and routes user traffic to other servers. 

It shuts down all servers to maintain data integrity.

It throttles application traffic to other servers so that they do not also fail.

Question 5

What is the primary purpose of FortiADC?

Select one:

Secure applications from outside threats

Manage database security and compliance

Provide additional wireless bandwidth for applications

Scale web-based applications for capacity and availability 

Question 6

Where is a FortiADC typically deployed?

Select one:

At the edge of the data center

It replaces the firewall in a data center and the servers are connected to it

Behind the firewall and in front of servers in a data center 

In remote locations to manage connectivity to the data center

Question 7

How does FortiADC prevent disaster recovery for applications?

Select one:

By delivering application code to users to make applications more responsive using HTTP compression

By spanning applications across data centers using Global Server Load Balancing 

By removing bottlenecks in encryption and decryption

By scaling applications across multiple servers using Server Load Balancing

Question 8

For which reason might an organization need an Application Delivery Controller (ADC)?

Select one:

Spam emails are overwhelming the organization's users

Attackers are overwhelming the organization's network with DDoS attacks

Quick recovery from outages of mission critical applications 

The organization's wireless network cannot handle application traffic demands

Question 9

In which scenario would a customer need the FortiADC Global Server Load Balancing feature?

Select one:

An organization wants to span an application across multiple data centers for disaster recovery. 

A network administrator wants to block application traffic from a particular geography.

Users in remote locations cannot access applications due to network bandwidth restrictions.

A customer wants to host an application in the cloud.

Question 10

How does the FortiADC Secure Traffic Offloading feature allow it to increase secure traffic capacity?

Select one:

It terminates secure traffic requests to limit the impact on servers.

It decrypts and encrypts secure traffic on the ADC instead of bogging down the application servers. 

It routes secure traffic to another data center for processing and inspection.

It installs specialized code on the servers to increase secure traffic processing.

Dapat nilai 90