NSE6-NSS Practice Questions & Answers • ExamPrepare

35 questions in this view

Page 1 of 6

Question 1

Refer to the exhibit.

Which two statements about FortiGate behavior relating to this session are correct? (Choose two.)

Debug output

FortiGate is performing a security profile inspection using the CPU.
FortiGate forwarded this session without any inspection.
FortiGate either initiated the session or the session terminates at FortiGate.
FortiGate redirected the client to the captive portal to authenticate so that a correct policy match could be made.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Refer to the exhibit.

Partial output of diagnose sys session stat command is shown.

An administrator has noticed unusual behavior from FortiGate. It appears that sessions are randomly removed.

Which two reasons could explain this? (Choose two.)

FortiGate is flushing sessions because of high memory usage.
FortiGate is dropping all TCP sessions with incomplete three-way handshakes.
FortiGate is deleting sessions because the kernel cannot allocate more memory pages.
FortiGate is not accepting sessions because the device has been down 16 out of 120 seconds.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

What can cause an IKEv2 tunnel to go down after it was initially brought up successfully?

Mismatched quick-mode selectors were detected during the Create_Child_SA exchange.
A mismatched Diffie-Hellman group was detected during the IKE_SA_INIT exchange.
A mismatched proposal was detected during the IKE_AUTH exchange.
A mismatched pre-shared key was detected during the IKE_AUTH exchange.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

What is the correct order of the IKEv2 request-and-response protocol?

IKE_SA_INIT, IKE_AUTH, Create_Child_SA
Create_Child_SA, IKE_AUTH, IKE_SA_INIT
Create_Child_SA, IKE_SA_INIT, IKE_AUTH
IKE_AUTH, IKE_SA_INIT, Create_Child_SA

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Refer to the exhibit. FortiGate is showing continuous high CPU usage. During a maintenance window, the CLI command diagnose sys top displays the output shown

in the exhibit.

The CLI command diagnose test application ipsmonitor 5 was run, but the CPU usage by daemon ipsengine did not drop.

Which immediate action can you take to reduce the CPU usage effectively?

Bypass all IPS engines.
Disable IPS on all firewall policies.
Reduce the number of IPS signatures enabled on the active IPS profiles.
Execute diagnose test application ipsmonitor 2 instead.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Refer to the exhibit.

The output from a collector agent log is shown.

The collector agent is showing the status of a workstation as “Not Verified”.

What are two common causes for this message? (Choose two.)

The workstation has come out of hibernate mode.
DNS cannot resolve the workstation name.
The workstation remote registry is not running.
Traffic to port 139 and 445 is blocked.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.