Fortinet Interview Questions

Fortinet Interview Questions and Answers

Q1.When Inspecting And Delivering Mail Messages, Which Steps Could Be Taken By A Fortimail Unit Operating In Transparent Mode?

Ans:

• Inspect for viruses.
• Inspect the content of the message payload.
• Inspect for spam.
• Perform a routing lookup to decide the next-hop MTA.

Q2.What Is The Method Does The Fortigate Unit Use To Determine The Availability Of A Web Cache Using Web Cache Communication Protocol (wccp)?

Ans: The web cache sends an “I see you” message which is captured by the FortiGate unit.

Q3.Wan Optimization Is Configured In Active/passive Mode When Will The Remote Peer Accept An Attempt To Initiate A Tunnel?

Ans: The attempt will be accepted when there is a matching WAN optimization passive rule.

Q4.How Can A Fortimail Administrator Retrieve Email Account Information From An Ldap Server Instead Of Configuring This Data Manually On The Unit?

Ans: Configure the LDAP profile sections “User query options” and “Authentication” then associate the profile to the domain that is locally configured.

Q5.Which Operational Mode Allows The Fortimail Unit To Operate As A Full-Featured Mail Server Rather Than Just A Mail Relay Agent?

Ans: Server Mode.

Q6.What Is One Reason For Deploying A Fortimail Unit In Transparent Mode?

Ans: DNS records do not necessarily have to be modified.

Q7.Which Profile Can Be Used To Protect Against Denial Of Service Attacks?

Ans: session profile.

Q8.Which Smtp Sessions Are Defined As Incoming?

Ans: SMTP sessions for the protected domain.

Q9.Which Back-end Servers Can Be Used To Provide Recipient Verification?

Ans:

• LDAP servers.
• SMTP servers.

Q10.When The DomainKeys Identified Mail (dkim) Feature Is Used, Where Is The Public Key Stored?

Ans: The public key is stored in the DNS TXT record.

Fortinet Firewall Interview Questions

Q11.What is your opinion of Fortinet's FortiGate Firewall?

Ans: The rising tendency towards all-in-one products sounds a good marketing idea, but when it comes to performance, there is a big gap. It is believed that when it comes to security there should be no negotiation and concession. With all in one box, perfectly synchronized with each other working synergistically, the product is bound to be appreciated. FortiOS released by Fortinet with its range of appliances offers good routing and encryption features by enhancing support for RIP I & II and OSPF.

Q12.Do you know about Fortinet as an Organization?

Ans: Fortinet is an American MNC with its headquarters in Sunnyvale, California. It develops and markets cybersecurity software, appliances, and services, such as firewalls, anti-virus, intrusion prevention, and endpoint security, among others. It is the fourth-largest network security company by revenue.

Q13.What does Aware mean in Fortinet Security fabric?

Ans: Security Fabric behaves as a single entity from a Policy and Logging perspective, enabling end-to-end segmentation in order to lessen the risk from advanced threats. We not only need to see data that flows into and out of the network but how that data pass through the network once it is inside the perimeter. Fortinet Security Fabric enables end-to-end network segmentation for deep visibility and inspection of traffic traveling the network, and controls who and what gets to go where thereby minimizing the risk from advanced threats.

Q14.When using a sender reputation on a FortiMail unit, which actions can be taken against a source IP address generating spam or invalid E-mail messages?

Ans:

• FortiMail Delays the email messages from that source IP address with a temporary failure.
• FortiMail Rejects the email messages from that source IP address with a permanent failure.
• FortiMail Quarantines all the email messages from that source IP address.

Q15.What do we mean by Actionable in Fortinet Security Fabric?

Ans: Big Data cloud systems correlate risk information and network data to deliver into Actionable Threat Intelligence in real-time. It is not enough to sense bad traffic or block malware using distinct security devices. Network administrators need a common set of risk intelligence and centralized orchestration that allows the security to dynamically adapt as a risk is revealed anywhere, not just in our network, but also anywhere in the world. Fortinet’s Big Data cloud systems centralize and correlate risk information and network data and provide actionable threat intelligence to each and every single security device in the network’s security fabric in real-time.

Q16.What distinguishes Fortinet’s security fabric approach from other vendors’ attempts at an integrated platform?

Ans: Fortinet distinguishes with other vendors with intentionally designed integration beginning with a unified operating system, highly optimized hardware and software processing with unmatched zero-day discovery, and a detection approach that combines behavioural detection, machine learning, and hardware virtualization. This allows the Fortinet Security Fabric to go beyond what is possible with a traditional signature-based approach to risk protection, or with siloed security technologies that vendors have begun to apparently stitch together using an overlay “platform” method.

Q17.Which back-end servers can be used to provide recipient verification?

Ans: LDAP servers, and SMTP servers.

Q18.What is the one reason for deploying a FortiMail unit in transparent mode?

Ans: If the network administrator deploys FortiMail unit in transparent mode then DNS records do not necessarily have to be modified.

Q19.An e-mail message, received by the FortiMail unit is subject to the bounce verification, Antispam check, under which circumstances?

Ans: The envelope MAIL FROM field contains a null reverse-path when a Bounce Verification key is created and activated.

Q20.Do you know about Fortinet as an Organization?

Ans: Fortinet is an American MNC with its headquarters in Sunnyvale, California. It develops and markets cybersecurity software, appliances, and services, such as firewalls, anti-virus, intrusion prevention, and endpoint security, among others. It is the fourth-largest network security company by revenue.