PassLeader just published the NEWEST Fortinet NSE6 exam dumps! And, PassLeader offer two types of the NSE6 dumps — NSE6 VCE dumps and NSE6 PDF dumps, both VCE and PDF contain the NEWEST NSE6 exam questions, they will help you PASSING the Fortinet NSE6 exam easily! Now, get the NEWEST NSE6 dumps in VCE and PDF from PassLeader — https://www.passleader.com/nse6.html (205 Q&As Dumps)
What’s more, part of that PassLeader NSE6 dumps now are free — https://drive.google.com/open?id=0B-ob6L_QjGLpX0pDRzN5bDJDMTQ
NEW QUESTION 146
Which devices can receive logs from FortiSandbox? (Choose two.)
A. SNMP manager
B. FortiAnalyzer
C. FortiManager
D. FortiGate
Answer: BD
NEW QUESTION 147
FortiGate is configured to send suspicious files to a FortiSandbox for in-line inspection. The administrator creates a new VDOM, and then generates some traffic so what the new VDOM sends a file to the FortiSandbox for the first time. Which is true regarding this scenario?
A. FortiSandbox will store the file, but not inspect it until the administrator manually authorizes the new VDOM.
B. Before generating traffic, the administrator can push the VDOM configuration from the FortiGate to the FortiSandbox.
Then when FortiSandbox receives the file, FortiSandbox will inspect the file.
C. FortiSandbox can be pre-configured to automatically authorize the new VDOM and inspect the file.
D. FortiSandbox will store the file, but not inspect it until the administrator manually adds the new VDOM to the FortiSandbox configuration.
Answer: B
NEW QUESTION 148
Which two types of digital certificates can you create in FortiAuthenticator? (Choose two.)
A. 3rd-party root certificate
B. Local services certificate
C. User certificate
D. CRL
Answer: BC
NEW QUESTION 149
Which is true regarding Microsoft Office on FortiSandbox?
A. Microsoft Word documents (.docx) are not inspected.
B. Office 365 files are not supported.
C. Microsoft Office is not included. You must purchase it separately, then manually install it in the applicable VMs on FortiSandbox.
D. Office 2013 is installed in one of the VMs.
Answer: C
NEW QUESTION 150
Which is not a supported captive portal authentication method?
A. SMS self-registration
B. Facebook authentication
C. Apple ID authentication
D. MAC address authentication
Answer: D
NEW QUESTION 151
An administrator is running the following sniffer in a FortiADC:
diagnose sniffer packet any “port 80” 2
What information is included in the output of the sniffer? (Choose two.)
A. IP headers
B. Ethernet headers
C. IP payload
D. Port names
Answer: AC
NEW QUESTION 152
Which protocols can a FortiSandbox inspect when is deployed in sniffer mode? (Choose two.)
A. MAPI
B. FTPS
C. HTTP
D. POP3
Answer: CD
NEW QUESTION 153
Which of the following statements best describe what a SYN cookie does when a SYN packet is received?
A. It replies with a SYN/ACK packet containing a cookie value on the TCP acknowledge field.
B. It replies with a RST packet if the SYN packet doesn’t contain the right cookie in the sequence field.
C. It replies with two SYN/ACK packets. One containing the right acknowledge values, and one containing a wrong acknowledge value.
D. It sends a SYN/ACK with a cookie in the sequence field.
Answer: AD
NEW QUESTION 154
Which of the following features are available in all FortiADC models? (Choose three.)
A. Intrusion protection signatures
B. SSL acceleration
C. HTTP cookie persistence
D. Source IP persistence
E. Antivirus scanning
Answer: BCD
NEW QUESTION 155
The sender validation techniques SPF and DKIM rely on data provided by what type of entity?
A. The upstream MTA
B. The sender’s LDAP server
C. The sender’s DNS records
D. The sender’s email envelope
Answer: C
NEW QUESTION 156
What is the maximum number of sites (or peers) supported in a global load-balancing solution based on FortiADC?
A. 32
B. 2
C. 64
D. 256
Answer: D
NEW QUESTION 157
What statement is true for the self-service portal? (Choose two.)
A. Administrator approval is required for all self-registrations
B. Self-registration information can be sent to the user through email and SMS
C. Realms can be used to configure what self-registered users or groups can access the network
D. Users self-register through the social portal splash screen
Answer: AB
NEW QUESTION 158
Which FortiADC log severity level corresponds to Log Severity Level 2?
A. Notification
B. Alert
C. Information
D. Critical
Answer: D
NEW QUESTION 159
Which methods can be used to submit files to FortiSandbox for inspection? (Choose two.)
A. File shares
B. FTP upload
C. SFTP upload
D. JSON API
Answer: AD
NEW QUESTION 160
Which FortiGate process sends files to FortiSandbox for inspection?
A. scanunit
B. fortisandboxd
C. miglogd
D. quarantine
Answer: A
NEW QUESTION 161
If FortiSandbox connects to FortiGuard through a web proxy server, which FortiSandbox interface must have access to the proxy server?
A. port3
B. port2
C. port1
D. port4
Answer: C
NEW QUESTION 162
Which of the following statements about virtual tunneling for outbound link load balancing are true? (Choose three.)
A. Two dispatch algorithms are supported: weighted round robin and source-destination hash.
B. A virtual tunnel can combine point-to-point and multipoint IP tunnels.
C. Link policies are used to specify which traffic is sent through each virtual tunnel.
D. Contains IP tunnels that encapsulate the traffic using a GRE-based proprietary protocol.
E. Each virtual tunnel can contain no more than three IP tunnels.
Answer: ACD
NEW QUESTION 163
You want to allow guests to authenticate to your network through Facebook. What configuration is required on FortiAuthenticator? (Choose two.)
A. A RADIUS client, in order to enable the social portal
B. A user group
C. An external authentication portal
D. A Facebook key and secret
Answer: AC
NEW QUESTION 164
If the corporate email policy dictates that SMTP over SSL/TLS is preferred for inbound SMTP connections and required for outbound SMTP connections, which FortiMail configuration object would be used?
A. Recipient policies
B. IP policies
C. Access control rules
D. Session profiles
Answer: C
NEW QUESTION 165
Which protocols can FortiSandbox use to connect to a network file share? (Choose two.)
A. FTP
B. HTTP
C. NFSv2
D. CIFS
Answer: AB
NEW QUESTION 166
In transparent mode, when choosing between using the built-in MTA or using the transparent proxy, what difference might be encountered regarding mail routing?
A. The transparent proxy can only be enabled on a route mode interface.
B. In split-horizon DNS setups, the transparent proxy will get confused and route mail back to the sender.
C. The built-in MTA may decide to route the message to a different next-hop MTA.
D. The transparent proxy may decide to route the message to a different next-hop MTA.
Answer: D
NEW QUESTION 167
……
Learning the PassLeader NSE6 dumps with VCE and PDF for 100% passing Fortinet certification — https://www.passleader.com/nse6.html (205 Q&As Dumps)
BONUS!!! Download part of PassLeader NSE6 dumps for free — https://drive.google.com/open?id=0B-ob6L_QjGLpX0pDRzN5bDJDMTQ