最新的Network Security認證 NSE6考試題庫

問題1

Which of the following features are available in all FortiADC models? (Choose three.)

A. HTTP cookie persistence

B. Intrusion protection signatures

C. SSL acceleration

D. Antivirus scanning

E. Source IP persistence

正確答案: A,C,E

問題2

What is the maximum number of sites (or peers) supported in a global load-balancing solution based on FortiADC?

A. 64

B. 32

C. 256

D. 2

正確答案: C

問題3

Which of the following statements about layer 2 load balancing are true? (Choose two.)

A. It's useful when the real IP addresses of the back-end servers are unknown by the
FortiADC administrator.

B. It supports IPv6.

C. Load balancing decisions are made based on the destination MAC address of the client traffic.

D. HTTP content can be modified.

正確答案: C,D

問題4

Which of the following statements best describe what a SYN cookie does when a SYN packet is received?

A. It sends a SYN/ACK with a cookie in the sequence field.

B. It replies with two SYN/ACK packets. One containing the right acknowledge values, and one containing a wrong acknowledge value.

C. It replies with a SYN/ACK packet containing a cookie value on the TCP acknowledge field.

D. It replies with a RST packet if the SYN packet doesn't contain the right cookie in the sequence field.

正確答案: A,C

問題5

Which CLI command on FortiAuthenticator is not used for troubleshooting network connectivity issues?

A. NTRADPing

B. ping

C. tcpdump

D. traceroute

正確答案: A

問題6

Which statements are true for the EAP-TTLS authentication method? (Choose two.)

A. Supports a port access control (wired) solution only

B. Validates only the server (FortiAuthenticator) identity

C. Requires an EAP server certificate

D. Uses mutual authentication

正確答案: C,D

最新的Fortinet Network Security Expert 6 - NSE6免費考試真題