Fortinet Fortinet Certification FCNSA.V5 Questions & Answers

• Question 1:

  Which of the following items represent the minimum configuration steps an administrator must perform to enable Data Leak Prevention for traffic flowing through the FortiGate unit? (Select all that apply.)

  A. Assign a DLP sensor in a firewall policy.

  B. Apply one or more DLP rules to a firewall policy.

  C. Enable DLP globally using the config sys dlp command in the CLI.

  D. Define one or more DLP rules.

  E. Define a DLP sensor.

  F. Apply a DLP sensor to a DoS sensor policy.

  Correct Answer: ADE

• Question 2:

  Because changing the operational mode to Transparent resets device (or vdom) to all defaults, which precautions should an Administrator take prior to performing this? (Select all that apply.)

  A. Backup the configuration.

  B. Disconnect redundant cables to ensure the topology will not contain layer 2 loops.

  C. Set the unit to factory defaults.

  D. Update IPS and AV files.

  Correct Answer: AB

• Question 3:

  Which of the following is true regarding Switch Port Mode?

  A. Allows all internal ports to share the same subnet.

  B. Provides separate routable interfaces for each internal port.

  C. An administrator can select ports to be used as a switch.

  D. Configures ports to be part of the same broadcast domain.

  Correct Answer: A

• Question 4:

  What is the FortiGate unit password recovery process?

  A. Interupt boot sequence, modify the boot registry and reboot. After changing the password, re- set the boot registry.

  B. Log in through the console port using the maintainer account within several minutes of a re- boot.

  C. Hold CTRL + break during reboot and reset the admin password.

  D. The only way to regain access is to interrupt boot sequence and restore a configuration file for which the password has been modified.

  Correct Answer: B

• Question 5:

  The FortiGate Web Config provides a link to update the firmware in the System > Status win- dow. Clicking this link will perform which of the following actions?

  A. It will connect to the Fortinet support site where the appropriate firmware version can be se- lected.

  B. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.

  C. It will present a prompt to allow browsing to the location of the firmware file.

  D. It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit.

  Correct Answer: C

• Question 6:

  Which of the following statements correctly describes how a push update from the FortiGuard Distribution Network (FDN) works?

  A. The FDN sends push updates only once.

  B. The FDN sends package updates automatically to the FortiGate unit without requiring an up- date request.

  C. The FDN continues to send push updates until the FortiGate unit sends an acknowledgement.

  D. The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update.

  Correct Answer: D

• Question 7:

  Which of the following options can you use to update the virus definitions on a FortiGate unit? (Select all that apply.)

  A. Push update

  B. Scheduled update

  C. Manual update

  D. FTP update

  Correct Answer: ABC

• Question 8:

  Which of the following statements best describes the green status indicators that appear next to different FortiGuard Distribution Network services as illustrated in the exhibit?

  

  A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Net- work.

  B. They indicate that the FortiGate unit has the latest updates that are available from the Forti- Guard Distribution Network.

  C. They indicate that updates are available and should be downloaded from the FortiGuard Dis- tribution Network to the FortiGate unit.

  D. They indicate that the FortiGate unit is in the process of downloading updates from the Forti- Guard Distribution Network.

  Correct Answer: A

• Question 9:

  A FortiGate 100 unit is configured to receive push updates from the FortiGuard Distribution Net- work, however, updates are not being received.

  Which of the following statements are possible reasons for this? (Select all that apply.)

  A. The external facing interface of the FortiGate unit is configured to use DHCP.

  B. The FortiGate unit has not been registered.

  C. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network.

  D. The FortiGate unit is in Transparent mode.

  Correct Answer: ABC

• Question 10:

  Caching improves performance by reducing FortiGate unit requests to the FortiGuard server.

  Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.)

  A. Caching is available for web filtering, antispam, and IPS requests.

  B. The cache uses a small portion of the FortiGate system memory.

  C. When the cache is full, the least recently used IP address or URL is deleted from the cache.

  D. An administrator can configure the number of seconds to store information in the cache be- fore the FortiGate unit contacts the FortiGuard server again.

  E. The size of the cache will increase to accomodate any number of cached queries.

  Correct Answer: BCD