Pass Your NSE 6 Network Security Specialist NSE6_FAD-6.2 Exam on Feb 17, 2023 with 30 Questions [Q16-Q32]

Q16. Whichtwo settings are included in the global load balancinggeneral DNS settings? (Choose two.)

Recursion

Response rate limit

Management traffic

Default zone configurations

Q17. An administrator wants to implement load balancing persistence by configuring FortiADC to prefix the server ID to an existing cookie sent by the back-end servers.
Which persistence method should the administrator use?

Hash cookie

Insert cookie

Persistence cookie

Embedded cookie

Q18. Which three statements about TurboHTTP are true?

It does not support content rewriting.

It is supported only on Layer 2 and layer 4 virtual servers.

It support the use of secured HTTP traffic.

It can be used with Layer 7 virtual servers.

It reduces network latency and system CPU usage.

Q19. In global load balancing, why might an administrator configure the response rate limit in FortiADC?

To redirect requests from a blocked county

To prevent FortiADG from being used in DNS amplification DoS attacks

To protect back-end servers from SYN flood attacks

To prioritize outgoing traffic by sending it through the link with the lowed response time

Q20. An administrator has been assigned the task of protecting their company application delivery servers from OWASP top- 10 threats.
How must they configure FortiADC to provide this capability?

Configure advanced health checks

Configure Layer 7 custom rates

Configure the advanced WAF

Configure IPv4 firewall policies

Q21. An administrator is running the following sniffer on FortiADC:
Diagnose sniffer packet any ”port80” 2
What two pieces of information are included in the output of the sniffer? (Choose two.)

IP payload

Ethernet headers

Port names

IP headers

Q22. Which two statements about virtual tunneling for outbound link load balancing are true? (Choose two.)

Link policies are used to specify which traffic is sent through each virtual tunnel.

Each virtual tunnel can contain no more than three IP tunnel.

Two dispatch algorithms are supported weighted round robin and source destination hash.

A virtual tunnel can combine point to point and multipoint IP tunnels.

Q23. Which three types of content can you optimize using a page speed profile? (Choose three.)

Streaming

Image

CSS

Video

Q24. To which two objects can link policies apply in FortiADC? (Choose two.)

Virtual tunnel

Virtual server

Gateway

Link group

Q25. When using FortiADC in a global load balancing configuration, in which two ways do general DNS settings differ from a global DNS policy? (Choose two.)

Traffic not matching a global DNS policy is served by the general DNS settings

Traffic matching source or destination criteria is served by the general DNS policy.

Traffic matching the zone, as well as both source and destination criteria, isserved by the global DNS policy.

Traffic not matching general DNS settings is served by a matching global DNS policy.

Q26. Which load balancing method requires the use of an SNMP health check?

Destination IP hash

Round robin

Dynamic load

Least connection

Q27. Which two statements about FortiADC logs are true? (Choose two.)

They can be stored on FortiCloud.

They can be uploaded automatically to an FTP server.

Only logs with seventy level equal to or greater than that configured log Severity level are generated.

They can record events related to security features.

Leave a comment Cancel reply