Fortinet NSE6_FAD-6.2 Online Practice Questions and Exam Preparation

Fortinet NSE6_FAD-6.2 Online Questions & Answers

• Question 1:

  When using FortiADC in a global load balancing configuration, in which two ways do general DNS settings differ from a global DNS policy? (Choose two.)

  A. Traffic not matching a global DNS policy is served by the general DNS settings
  B. Traffic matching source or destination criteria is served by the general DNS policy.
  C. Traffic matching the zone, as well as both source and destination criteria, isserved by the global DNS policy.
  D. Traffic not matching general DNS settings is served by a matching global DNS policy.
  A. Traffic not matching a global DNS policy is served by the general DNS settings
  C. Traffic matching the zone, as well as both source and destination criteria, isserved by the global DNS policy.

• Question 2:

  An administrator has configured all the back end servers with a maximum warm-up state rate. Under which two conditions is the maximum rate enforced by FortiADC? (Choose two.)

  A. As long as a server keeps replying to the health Check
  B. When multiple health check methods have been configured for a server and some of them are failing but at least one is up.
  C. When the status of a server is set to Enabled from Maintain of Disabled
  D. During a warm-up period, when a server is back online after a health check downtime
  C. When the status of a server is set to Enabled from Maintain of Disabled
  D. During a warm-up period, when a server is back online after a health check downtime

• Question 3:

  Which load balancing method requires the use of an SNMP health check?

  A. Destination IP hash
  B. Round robin
  C. Dynamic load
  D. Least connection
  C. Dynamic load

• Question 4:

  Refer to the exhibit.

  

  The exhibit shows the Basic andGeneral tabs of a virtual server configuration. Why is the Scripting option not available?

  A. Scripting is not supported when using a RADIUS profile
  B. Scripting is not supported when using round robin load balancing
  C. Scripting is not supported on Layer 7 type virtual servers.
  C. Scripting is not supported on Layer 7 type virtual servers.

• Question 5:

  Which two actions can FortiADC take with the GeoIP block list when receiving requests from a blocked country's address space? (Choose two.)

  A. Deny access
  B. Redirect the request
  C. Apply an HTTP protocol constraint
  D. Send a 404 Not Found message
  A. Deny access
  B. Redirect the request

• Question 6:

  Which two configuration actions are possible when protecting application delivery servers from clients with IP addresses in the IP reputation database? (Choose two.)

  A. Automatically create a WAF profile based on the traffic
  B. Redirect the traffic to a different URL
  C. Block the traffic.
  D. Analyze the traffic using WVS rules
  B. Redirect the traffic to a different URL
  C. Block the traffic.

• Question 7:

  An administrator has been assigned the task of protecting their company application delivery servers from OWASP top- 10 threats. How must they configure FortiADC to provide this capability?

  A. Configure advanced health checks
  B. Configure Layer 7 custom rates
  C. Configure the advanced WAF
  D. Configure IPv4 firewall policies
  C. Configure the advanced WAF

• Question 8:

  An administrator is managing a web site that uses specialized servers for streaming, in addition to servers that handle HTTP traffic. To make sure that specialized servers handle the streaming traffic, what FortiADC capacity should they use?

  A. Persistence rules
  B. Content routing
  C. Dynamic load balancing
  D. HTTP compression
  B. Content routing

• Question 9:

  Which two statements about virtual tunneling for outbound link load balancing are true? (Choose two.)

  A. Link policies are used to specify which traffic is sent through each virtual tunnel.
  B. Each virtual tunnel can contain no more than three IP tunnel.
  C. Two dispatch algorithms are supported weighted round robin and source destination hash.
  D. A virtual tunnel can combine point to point and multipoint IP tunnels.
  A. Link policies are used to specify which traffic is sent through each virtual tunnel.
  C. Two dispatch algorithms are supported weighted round robin and source destination hash.

• Question 10:

  An administrator is running the following sniffer on FortiADC:

  Diagnose sniffer packet any `'port80'' 2

  What two pieces of information are included in the output of the sniffer? (Choose two.)

  A. IP payload
  B. Ethernet headers
  C. Port names
  D. IP headers
  A. IP payload
  D. IP headers