NSE2 Questions and Answers
NSE2 Questions and Answers
For network security, the challenges that have arisen as a result of rapid and
disruptive digital innovation, we know as such
• Network as a service *
• Security as a service *
The result of outdated network security solutions that require all traffic to pass
through the main data center for inspection resulting in increased latency
When they talk about Thin Edge we refer to Branches with minimum security that are
connected to a central network
SASE's goal is to support the secure and dynamic access needs of today's
organizations by extending enterprise-grade networking and security, regardless of
location.
It is important to emphasize that the final responsibility for the security of the client's
data and services hosted in the cloud rests with the Client.
One potential issue customers risk if they rely solely on vendor cloud security tools is
that these types of tools provide basic security and do not protect all facets of a multi-
cloud environment.
Cloud computing is the practice of using a network of remote servers hosted on the
Internet to store, manage and process data. And examples of this we have Platform
as a Service (PaaS), Infrastructure as a Service (IaaS)
The reason that led organizations to use cloud services is mainly cost savings by
paying only for the necessary computing services.
• Unreliable
WAN is a computer network that spans a large geographic area and typically
consists of two or more LANs.
Managing multiple point products could cause increased complexity for IT security
due to
Demand for more cloud applications and services led to higher Internet latency in the
network model for the single dedicated service provider or MPLS model
Basic Load Balancing was one of the features of the first generation SD-WAN
applied smart business decisions.
Firewalls
• You can segment a network based on user, device, and application type
• Offers high performance inspection
• Control apps based on type or who the user is
The two types of firewalls that can block a connection depending on the type of
application are
One of the limitations of first-generation firewalls was that they could not distinguish
between malicious and legitimate applications.
The main feature of headless devices is that they are devices that cannot support a
third-party security agent.
The security challenges presented by IoT devices for IT security professionals are
that
When the NAC is implemented for the first time one of the first tasks it performs is:
Among the network security concerns that have grown dramatically for businesses
in recent years
One of the shortcomings of NAC solutions is that some NAC solutions underperform
in wired environments, creating a security vulnerability.
• Authentication server
• Authenticator
• client device
Normally to join a public network, such as one in a coffee shop we must accept the
legal terms for using the network
What drives organizations to purchase IoT devices is that they can save time and
money
IoT devices are potential conduits of contagion since security software cannot be
installed on them
SOAR Quiz Answers What are playbooks used for?
• It connects all the tools in your security stack into defined workflows
that can be executed automatically.
What are the three reasons why SOAR is used? (Choose three.) Select one or more:
Phishing investigations*
• SOAR connects all security tools into defined workflows that can be
executed automatically*
EndPoint:
• Signature based
Identify two problems that are solved by having a single security agent on the
endpoints. (Choose two.)
• Antivirus (AV)
• Data protection through encryption
• Web filtering
What two types of devices are considered terminals, according to the lesson
description? (Choose two.)
Wifi
Question 1: What standard is Wi-Fi based on?
•
IEEE 802.11
•
ISO 5750
•
5-4-3 rule
•
10Base-T
Question 2: When the Ethernet switch was introduced, what important benefit
did it bring to networks?
•
It allowed simultaneous transmissions on a network.
•
The number of computers that can be connected to a network has
increased.
• Reduced the number of transmission collisions that occur in a
wired network.
• Enabled the connection of wireless clients.
Question 3: The current best level of security provided for Wi-Fi networks is
WPA3. What other Wi-Fi security protocol is also commonly recommended?
WPA4 •
WPA •
•
W.E.P.
WPA2 •
Question 4: In what year did the first wireless local access network emerge?
SASE:......................................................................................................................................1
Cloud Security:........................................................................................................................2
SD-WAN:................................................................................................................................3
Firewalls..................................................................................................................................4
NAC:.......................................................................................................................................5
• Stop any user action if it exceeds your network permissions........................................14
• IP.......................................................................................................................................15
• Complying with regulations*.........................................................................................16
• Complying with regulations...........................................................................................17
• Data leak prevention (DLP)...........................................................................................19
• FortiMail can integrate with segmentation firewalls.....................................................19
• It doesn't scale well, because the number of malware files increases by millions or
more every day......................................................................................................................24
• He behaved abnormally*...............................................................................................24
•
Question 5: What does WPA mean?
Choose one:
WEB filter
Question 1: Which three Fortinet products have built-in web filters? (Choose
three.)
• FortiClient
• FortiAP
• FortiSIEM
• FortiGate
• FortiSandbox
Question 2: Web filters can provide a safe browsing experience by blocking
which three threats? (Choose three.)
• DHCP requests
• spyware
• virus
• advertising
Question 3: What are two things a web filter does? (Choose two.)
• Device manufacturers
• The company or person who installs the application.
• Governments
• law enforcement
Question 5: What method do web filters typically use to block websites?
• They examine email links to make sure the URLs have not been
spoofed.
• They return search results only from authorized websites.
Choose one:
• Content Categorization
• Searching content
• Test files in Virtual machines segregated
• Facilitate the performance of network traffic
Question 8: How have web filters improved computer security?
Choose one:
• They tested all the URLs on segregated virtual machines to see what
they would do.
• They blocked adware, spam, viruses and spyware.
• They prevented denial of service attacks.
• They blocked lewd websites.
Question 9: Why did some people oppose web filters?
Choose one:
Choose one:
WAF:
• Antivirus software
• Application firewall
• web firewall
• internet filter
Question 3: What do web application firewalls do that traditional perimeter
firewalls don't?
• FortiPhone
• FortiConnect
• FortiGate
• FortiFax
• FortiSandbox
Question 8: What action can a modern WAF perform?
Choose one:
• UPE
• DDoS defense
• DLP
• Network segmentation
• IP reputation
Question 10: What protocol traffic does a web application firewall (WAF)
monitor?
Choose one:
• HTTP
• CLNP
• IP
• TCP
Question 11: What new feature characterized the second generation WAFs?
Choose one:
• Packet analysis
• Machine learning without human supervision
• Port and protocol blocking
• Heuristics
SIEM:
• HIPAA
• PCI
• SPML
• XSLT
• GDPR
Choose one:
Choose one:
Choose one:
Choose one:
Choose one:
Choose one:
Question 14: Which feature provides SIEM with greater visibility into the entire
network?
Choose one:
Choose one:
Choose one:
• Decrypt encrypted/data streams
• Apply security controls
• Decrypt encrypted logs and alerts
• Be on the lookout for known indicators of compromise (IoC)
Question 18: What was your primary reason for purchasing SIEM?
Choose one:
Choose one:
Choose one:
Choose one:
• An attacker observes the websites a target group visits and directs
them to an infected website.
• A fraudulent practice of sending emails purporting to be
reputable to steal information. Fraudulent messages targeting a
specific role or person within an organization
•• Irrelevant or inappropriate messages sent over the Internet to a large
number of recipients
Question 11: Which option identifies the phishing trend?
Choose one:
•Plateau
•Erratic
•Declining
•Growing
Question 12: What challenge caused Secure Email Gateway (SEG) to embrace
automation and machine learning?
Choose one:
•Attack volume
•Delay in the implementation of the sender's policy framework
•Clickbait success
•Data loss
Question 13: What method did the first spam filter use to stop spam?
Choose one:
• Email emulator
• Antivirus scanner
• Sandbox
• firewall
Sandbox:
Question 1: What two problems were network security experiencing before the
introduction of a sandboxed solution? (Choose two.)
• Network security was unable to handle a coordinated attack using
different methods and threat vectors.
• AI-powered attacks*
• Troy Horse
• Data ransom
• polymorphic viruses
What feature of early networks made it difficult to aggregate threat
intelligence?
Choose one:
• It is important that people become more aware and informed about any
attacks.
• Sharing intelligence between security vendors is the best way to
combat threats.
• There is no secrecy within security providers and all information is
shared.
• As bad actors continue to evolve, it is important to invest in expensive
security products.
• Security products and threat intelligence services that can act
together in real time have the best chance of stopping these
attacks.
Question 2: What are the three functions of sandboxing? (Choose three.)
• Once a year
• Weekly
• Monthly
• Twice a year
• Quarterly
• He behaved abnormally*
• Exploited a known software weakness
• Checksum failed
• Matching signatures
Question 8: Which statement best describes an indicator of compromise (IoC)?
Choose one:
• A list of network devices that are known to be compromised
• Sources of potential threat actors and their sponsors.
• Evidence that a cyber attack has occurred or is in progress*
• Valuable information about computer systems and the network.
Question 9: Which two organizations are examples of a threat intelligence
service that serves the broader security community? (Choose two.)
Select one or more:
• NIST
• Malware as a service
• Alliance against cyber threats*
• FortiGuard Laboratories*
Question 10: How is the sandbox detection method known? Choose one:
• Heuristic detection
• Detection checksum
• Detection signature based
• Detection rule based
Question 11: Which method best defeats unknown malware? Choose one:
• Anticipated malware detection
• Web filtering
• Sandbox*
• Signature-based detection
Question 12: Which statement best describes polymorphic malware? Choose
one:
EndPoint:
• advertising
• file based
• Polymorphic
• Social engineering
• Remediation
• Machine Learning (ML)
• forensic Medicine
• virtual patches
Question 8: What three prevention-focused services are found in the Endpoint
Protection Platform (EPP)? (Choose three.)
• Antivirus (AV)
• forensic Medicine
• Remediation tools
• Data protection through encryption
• Web filtering
Question 9: Why do threat actors target endpoints on a network?
• databases
• Computing devices used by end users
• Internet of Things (IoT)
• Servers
ZTNA
What three examples qualify as remote work? (Choose three.)
• A CEO using VPN to securely connect to the network from home.
• An IT manager gets stuck using email while waiting for a flight.
• A guest auditor working from the data center.
• A member who is granted temporary access to the network while
visiting the
main office.
• A human resources specialist who works from a branch office.