NSE6_FAD-6.2 Online Practice Questions and Answers

A FortiADC administrator wants to offload SSL encryption and decryption of web traffic to lessen overhead on the real servers, while maintaining SSL encryption with the client.

Which must be true to allow FortiADC to provide this capability?

A. The real server pool must be configured for SSL

B. The virtual server must be configured to perform content routing

C. The real server certificate and private key must be installed on FortiADC

D. The virtual server must use a TCPS application profile

In global load balancing, why might an administrator configure the response rate limit in FortiADC?

A. To redirect requests from a blocked county

B. To prevent FortiADG from being used in DNS amplification DoS attacks

C. To protect back-end servers from SYN flood attacks D. To prioritize outgoing traffic by sending it through the link with the lowed response time

An organization has decided to automate specific tasks by leveraging the fortiADC REST API. The tasks will perform updates to existing items. Which REST API method should you use to update existing items on FortiADC?

A. PATCH

B. POST

C. GET

D. PUT

Refer to the exhibit.

The exhibit shows the first few lines of three scripts, and a virtual server configuration leveraging these scripts.

Based on the way FortiADC prioritizes script execution, in what order will the scripts execute?

A. COOKIE_COMMANDS, GENERAL_REDIRECT, GEOIP_UTILITY

B. COOKIE_COMMANDS< GEOIP_UTILITY, GENERAL_REDIRECT

C. GEOIP_UTILITY, GENERAL_ REDIRECT, COOKIE_COMMAND

Which two FortiADC features can you um to harden the device and server security? (Choose two.)

A. Connection limits

B. Web filtering

C. Antivirus scanning

D. FortiGuard IP reputation

An administrator has been assigned the task of protecting their company application delivery servers from OWASP top- 10 threats.

How must they configure FortiADC to provide this capability?

A. Configure advanced health checks

B. Configure Layer 7 custom rates

C. Configure the advanced WAF

D. Configure IPv4 firewall policies

Which two configuration actions are possible when protecting application delivery servers from clients with IP addresses in the IP reputation database? (Choose two.)

A. Automatically create a WAF profile based on the traffic

B. Redirect the traffic to a different URL

C. Block the traffic.

D. Analyze the traffic using WVS rules

Which load balancing method requires the use of an SNMP health check?

A. Destination IP hash

B. Round robin

C. Dynamic load

D. Least connection

An administrator has configured all the back end servers with a maximum warm-up state rate.

Under which two conditions is the maximum rate enforced by FortiADC? (Choose two.)

A. As long as a server keeps replying to the health Check

B. When multiple health check methods have been configured for a server and some of them are failing but at least one is up.

C. When the status of a server is set to Enabled from Maintain of Disabled

D. During a warm-up period, when a server is back online after a health check downtime

When using FortiADC in a global load balancing configuration, in which two ways do general DNS settings differ from a global DNS policy? (Choose two.)

A. Traffic not matching a global DNS policy is served by the general DNS settings

B. Traffic matching source or destination criteria is served by the general DNS policy.

C. Traffic matching the zone, as well as both source and destination criteria, isserved by the global DNS policy.

D. Traffic not matching general DNS settings is served by a matching global DNS policy.