FortiGate NGFW

Overview

Rewards

FAQs

Overview

FortiGate NGFW (Next-Generation Firewall) is a network security appliance developed by Fortinet. It combines traditional firewall functionality with advanced security features to provide comprehensive protection for networks.

It is known for its high performance and scalability, making it suitable for small to large enterprise networks. It offers a robust set of security features to protect networks from various threats, including malware, intrusions, and unauthorized access attempts.

Take this assessment to know how good you are with FortiGate NGFW.

Click the Rewards tab for eligibility requirements.

Read the FAQs tab carefully for Instructions before beginning the assessment.

Rewards

NYXPoints are used to generate the Leaderboard (coming soon). They are awarded for achieving a certain score.

200 nyxpoints for a passing score of 80% or more
300 nyxpoints for a perfect score of 100%
Didn’t pass? You still get 30 nyxpoints for attempting the assesment

FAQs

IMPORTANT instructions for taking the Assessment

The timer starts when you click Start Assessment
DO NOT refresh/reload the page or use the back button to navigate away from the page.
Navigating away from the assessment page DOES NOT stop/pause the timer and the will restart the assessment when you come back to it. The answers are NOT saved.

General

There are NO pre-requisites to take this assessment. Take this assessment even if you are completely new to Linux.
The assessment is completely FREE.
Preferably take it in a closed book mode.
DO NOT copy/paste, share or upload questions elsewhere.

Eligible Rewards

300 NyxCoins*

* NyxCoins vary on score

Questions

Minutes

1 %

Passing Score

Time limit: 0

Assessment Summary

0 of 30 Questions completed

Questions:

Information

You have already completed the assessment before. Hence you can not start it again.

Assessment is loading…

You must sign in or sign up to start the assessment.

You must first complete the following:

Results

Assessment complete. Results are being recorded.

Results

0 of 30 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Average score
Your score

Categories

Not categorized 0%

Current
Review
Answered
Correct
Incorrect

Question 1 of 30

1. Question
Which of the following are the correct Anti-virus scanning techniques for Anti-virus module of Fortigate NGFW? (Multiple Choice)
- Anti-virus Scan
- Greyware Scan
- Zero-Day Scan
- Heuristics Scan
Correct

Incorrect
Question 2 of 30

2. Question
Which network protocols are supported for administrative access to a FortiGate NGFW appliance? (Multiple Choice)
- SMTP
- HTTP
- Telnet
- SSH
Correct

Incorrect
Question 3 of 30

3. Question
Which antivirus database does quick scan mode use?
- Extended
- Compact
- Incremental
- Redundant
Correct

Incorrect
Question 4 of 30

4. Question
Which statements are correct about partial mesh VPN deployment in FortiGate Firewall? (Multiple Choice)
- VPN tunnels interconnect between each location.
- VPN tunnels are not configured between every single location.
- Some location may be reachable via a hub location.
- It cannot contain redundant VPN tunnels.
Correct

Incorrect
Question 5 of 30

5. Question
Which is not a feature of a FortiGate NGFW?
- Database auditing
- Intrusion prevention
- Web filtering
- Application control
Correct

Incorrect
Question 6 of 30

6. Question
Which of the following is evaluated first in an IPS sensor in Fortigate NGFW?
- IPS filter
- IPS Updates
- IPS signature
- IPS alerts
Correct

Incorrect
Question 7 of 30

7. Question
A new administrator account is created, and you assign it the prof_admin profile. Which is NOT CORRECT about that account’s permissions?
- It cannot upgrade or downgrade firmware.
- It can create and assign administrator accounts to its own VDOM.
- It can reset older passwords for other administrator accounts such as "admin".
- It has a smaller permissions scope than accounts with the "super_admin" profile.
Correct

Incorrect
Question 8 of 30

8. Question
Which local storage type is preferred for logging in Fortigate appliances?
- Flash drive
- RAM
- Hard drive
- Tape drive
Correct

Incorrect
Question 9 of 30

9. Question
What are the ways FortiGate can monitor logs? (Multiple Choice)
- AI and ML
- Alert Emails
- SNMP
- Alert Message Console
Correct

Incorrect
Question 10 of 30

10. Question
What are the different remote devices to which FortiGate can send logs? (Multiple Choice)
- Syslog
- FortiAnalyzer
- Memory
- FortiCloud
Correct

Incorrect
Question 11 of 30

11. Question
Where are most of the security events logged in Fortigate NGFW?
- Security log
- Forward Traffic log
- Event log
- Session Log
Correct

Incorrect
Question 12 of 30

12. Question
How much percent of disk space is reserved by Fortigate NGFW for system usage and unexpected quota overflow?
- 10
- 25
- 30
- 40
Correct

Incorrect
Question 13 of 30

13. Question
Which statement is CORRECT about incoming and outgoing interfaces in firewall policies?
- A physical interface should not be used.
- A zone may not be used.
- Multiple interfaces should not be used for both incoming and outgoing.
- Source and destination interfaces are mandatory.
Correct

Incorrect
Question 14 of 30

14. Question
Which authentication method is NOT supported by the RADIUS implementation on FortiGate?
- CHAP
- MSCHAP2
- PAP
- FSSO
Correct

Incorrect
Question 15 of 30

15. Question
Which are the valid methods that FortiGate can use to send a One Time Password (OTP) to Two-FA users? (Multiple Choice)
- Hardware FortiToken
- Web Portal
- Email
- USB Token
Correct

Incorrect
Question 16 of 30

16. Question
Which protocol does Fortigate use to send encrypted logs to FortiAnalyzer?
- SSL
- SFTP
- OFTPS
- HTTPS
Correct

Incorrect
Question 17 of 30

17. Question
Which authentication methods are valid in an IPsec phase 1? (Multiple Choice)
- Asymmetric Keys
- CA root digital certificates
- RSA signature
- Pre-shared keys
Correct

Incorrect
Question 18 of 30

18. Question
How does FortiGate NGFW check to see if a certificate has been revoked?
- It retrieves the CRL from a directory server.
- It checks the CRL that resides on FortiGate.
- It check CRL list on destination URL.
- None of the above.
Correct

Incorrect
Question 19 of 30

19. Question
Which of the following correctly defines Diffie-Hellman?
- A symmetric encryption algorithm.
- A "key-agreement" protocol.
- A "Security-association-agreement" protocol.
- An authentication algorithm.
Correct

Incorrect
Question 20 of 30

20. Question
The maximum number of different virus databases that a FortiGate firewall can have is?
- 8
- 2
- 5
- 4
Correct

Incorrect
Question 21 of 30

21. Question
Which of the following are valid actions for static URL filtering feature in Fortigate NGFW? (Multiple Choice)
- Allow
- Block
- Exempt
- Warning
Correct

Incorrect
Question 22 of 30

22. Question
What is CORRECT regarding application control feature in Fortigate? (Multiple Choice)
- It is based on TCP destination port numbers.
- It is proxy based.
- Encrypted traffic can be identified by application control.
- Traffic shaping can be applied to the detected application traffic.
Correct

Incorrect
Question 23 of 30

23. Question
Which statement about captive portal is true?
- Captive portal must be hosted on a FortiGate device.
- Captive portal can exempt specific devices from authenticating.
- Captive portal cannot be configured.
- Captive portal is based on AI and Java.
Correct

Incorrect
Question 24 of 30

24. Question
Which are the VALID fields contained in the Layer3/Layer4 headers that can be used to make a routing decision when using policy-based routing? (Multiple Choice)
- Source IP address
- TCP flags
- Source TCP/UDP ports
- Type of service
Correct

Incorrect
Question 25 of 30

25. Question
In order to keep two static routes to the same destination in the routing table, what will be a valid configuration option?
- The same priority.
- The same distance and same priority.
- The same distance.
- The same metric.
Correct

Incorrect
Question 26 of 30

26. Question
What is the purpose of policy lookup feature on FortiGate NGFW?
- To block traffic based on input criteria.
- To find a matching policy based on input criteria.
- To allow policy to find updates for the address objects used.
- To allow external search for threats based on criteria mentioned.
Correct

Incorrect
Question 27 of 30

27. Question
Which of the following parameters have to be the same for two FortiGate NGFWs to form an HA cluster? (Multiple Choice)
- Firmware
- Model
- Hostname
- System time zone
Correct

Incorrect
Question 28 of 30

28. Question
Where do you enable logging of application control events?
- Application control logs are enabled in the firewall policy configuration.
- Application control logs are enabled on Log and Report settings page of FortiGate.
- Application control logs are enabled on FortiGate portal.
- Application control logs cannot be enabled.
Correct

Incorrect
Question 29 of 30

29. Question
FSSO DC mode and polling mode are two options when you configure Fortigate NGFW. What are the advantages of FSSO DC mode?
- Redundancy in the collector agent is possible FSSO DC mode.
- FSSO DC mode allows transparent authentication.
- DC agents are not required in the AD domain controllers in FSSO DC mode.
- Scalability.
Correct

Incorrect
Question 30 of 30

30. Question
Which of the following is a valid action for static URL filtering in FortiGate?
- Warning
- Exempt
- Restrict
- Smartblock
Correct

Incorrect

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

FortiGate NGFW

Eligible Rewards

300 NyxCoins*

Assessment Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question