Free Fortinet NSE6 Exam Dumps Questions & Answers

You are a FortiAuthenticator administrator for a large organization, and suddenly all of the
FortiToken 200 users in the organization are unable to authenticate using their tokens.
What is the most probable reason?

• A.The clocks on all the tokens have drifted and require re-synchronizing.
• B.The tokens have all been locked.
• C.The X.509 certificates on the tokens, or the root CA certificate that signed the certificates, have been revoked.
• D.The FortiAuthenticator system time is not synchronized using NTP and has drifted.

For the case of outbound link load balancing, which upstream link is elected by the proximity route dynamic detection feature as the best one for a destination IP address?

• A.The link with the lowest number of packets lost
• B.The link with the lowest round-trip delay to the destination IP address
• C.The link with the lowest number of sessions
• D.The link with the lowest traffic utilization

Which CLI command on FortiAuthenticator is not used for troubleshooting network connectivity issues?

• A.NTRADPing
• B.tcpdump
• C.ping
• D.traceroute

Which behavior does not exist for certificate revocation lists (CRLs) on FortiAuthenticator?

• A.CRLs can be exported
• B.Revoked certificates are automatically placed on the CRL
• C.All local CAs share the same CRLs
• D.SCEP can be used to distribute CRLs

Based on the exhibit, which are true? (Choose two.)

• A.FortiSandbox will scan all Flash applications using Internet Explorer 10. This does not guarantee safety for Internet Explorer 8.
• B.Depending on the version indicated in the PDF file, FortiSandbox will scan using only one PDF reader (either Adobe Reader 9 or Adobe Reader 11).
• C.If there are no Internet Explorer 10 installations in your network, you can safely disable the scanning of Adobe Flash with Microsoft Internet Explorer 10.
• D.You can safely disable the PDF scanning with Acrobat Reader 9 because PDF scanning with Acrobat Reader 11 is enabled.