Fortinet Fortinet Certification NSE6_FAD-6.2 Questions & Answers

• Question 1:

  When using FortiADC in a global load balancing configuration, in which two ways do general DNS settings differ from a global DNS policy? (Choose two.)

  A. Traffic not matching a global DNS policy is served by the general DNS settings

  B. Traffic matching source or destination criteria is served by the general DNS policy.

  C. Traffic matching the zone, as well as both source and destination criteria, isserved by the global DNS policy.

  D. Traffic not matching general DNS settings is served by a matching global DNS policy.

  Correct Answer: AC

• Question 2:

  Which load balancing method requires the use of an SNMP health check?

  A. Destination IP hash

  B. Round robin

  C. Dynamic load

  D. Least connection

  Correct Answer: C

• Question 3:

  An administrator has configured all the back end servers with a maximum warm-up state rate.

  Under which two conditions is the maximum rate enforced by FortiADC? (Choose two.)

  A. As long as a server keeps replying to the health Check

  B. When multiple health check methods have been configured for a server and some of them are failing but at least one is up.

  C. When the status of a server is set to Enabled from Maintain of Disabled

  D. During a warm-up period, when a server is back online after a health check downtime

  Correct Answer: CD

• Question 4:

  Refer to the exhibit.

  

  

  The exhibit shows the Basic andGeneral tabs of a virtual server configuration.

  Why is the Scripting option not available?

  A. Scripting is not supported when using a RADIUS profile

  B. Scripting is not supported when using round robin load balancing

  C. Scripting is not supported on Layer 7 type virtual servers.

  Correct Answer: C

• Question 5:

  Which two actions can FortiADC take with the GeoIP block list when receiving requests from a blocked country's address space? (Choose two.)

  A. Deny access

  B. Redirect the request

  C. Apply an HTTP protocol constraint

  D. Send a 404 Not Found message

  Correct Answer: AB

• Question 6:

  Which two configuration actions are possible when protecting application delivery servers from clients with IP addresses in the IP reputation database? (Choose two.)

  A. Automatically create a WAF profile based on the traffic

  B. Redirect the traffic to a different URL

  C. Block the traffic.

  D. Analyze the traffic using WVS rules

  Correct Answer: BC

• Question 7:

  An administrator is managing a web site that uses specialized servers for streaming, in addition to servers that handle HTTP traffic.

  To make sure that specialized servers handle the streaming traffic, what FortiADC capacity should they use?

  A. Persistence rules

  B. Content routing

  C. Dynamic load balancing

  D. HTTP compression

  Correct Answer: B

• Question 8:

  An administrator has been assigned the task of protecting their company application delivery servers from OWASP top- 10 threats.

  How must they configure FortiADC to provide this capability?

  A. Configure advanced health checks

  B. Configure Layer 7 custom rates

  C. Configure the advanced WAF

  D. Configure IPv4 firewall policies

  Correct Answer: C

• Question 9:

  Which two statements about virtual tunneling for outbound link load balancing are true? (Choose two.)

  A. Link policies are used to specify which traffic is sent through each virtual tunnel.

  B. Each virtual tunnel can contain no more than three IP tunnel.

  C. Two dispatch algorithms are supported weighted round robin and source destination hash.

  D. A virtual tunnel can combine point to point and multipoint IP tunnels.

  Correct Answer: AC

• Question 10:

  Whichtwo settings are included in the global load balancinggeneral DNS settings? (Choose two.)

  A. Recursion

  B. Response rate limit

  C. Management traffic

  D. Default zone configurations

  Correct Answer: AB