Fortinet Fortinet Certification FCNSP.V5 Questions & Answers

• Question 21:

  Which of the following tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Select all that apply.)

  A. The web client SSL handshake.

  B. The web server SSL handshake.

  C. File buffering.

  D. Communication with the urlfilter process.

  Correct Answer: AB

• Question 22:

  When the SSL proxy inspects the server certificate for Web Filtering only in SSL Handshake mode, which certificate field is being used to determine the site rating?

  A. Common Name

  B. Organization

  C. Organizational Unit

  D. Serial Number

  E. Validity

  Correct Answer: A

• Question 23:

  When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search

  option.

  What is a valid reason for using the Full Search option, instead?

  A. The search items you are looking for are not contained in indexed log fields.

  B. A quick search only searches data received within the last 24 hours.

  C. You want the search to include the FortiAnalyzer's local logs.

  D. You want the search to include content archive data as well.

  Correct Answer: A

• Question 24:

  Both the FortiGate and FortiAnalyzer units can notify administrators when certain alert conditions are met.

  Considering this, which of the following statements is NOT correct?

  A. On a FortiGate device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.

  B. On a FortiAnalyzer device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.

  C. Only a FortiAnalyzer device can send the alert notification in the form of a syslog message.

  D. Both the FortiGate and FortiAnalyzer devices can send alert notifications in the form of an email alert.

  Correct Answer: B

• Question 25:

  Which of the following report templates must be used when scheduling report generation?

  A. Layout Template

  B. Data Filter Template

  C. Output Template

  D. Chart Template

  Correct Answer: A

• Question 26:

  In which of the following report templates would you configure the charts to be included in the report?

  A. Layout Template

  B. Data Filter Template

  C. Output Template

  D. Schedule Template

  Correct Answer: A

• Question 27:

  An administrator wishes to generate a report showing Top Traffic by service type. They notice that web traffic overwhelms the pie chart and want to exclude the web traffic from the report.

  Which of the following statements best describes how to do this?

  A. In the Service field of the Data Filter, type 80/tcp and select the NOT checkbox.

  B. Add the following entry to the Generic Field section of the Data Filter: service="!web".

  C. When editing the chart, uncheck wlog to indicate that Web Filtering data is being excluded when generating the chart.

  D. When editing the chart, enter 'http' in the Exclude Service field.

  Correct Answer: A

• Question 28:

  An administrator wishes to generate a report showing Top Traffic by service type, but wants to exclude SMTP traffic from the report.

  Which of the following statements best describes how to do this?

  A. In the Service field of the Data Filter, type 25/smtp and select the NOT checkbox.

  B. Add the following entry to the Generic Field section of the Data Filter: service="!smtp".

  C. When editing the chart, uncheck mlog to indicate that Mail Filtering data is being excluded when generating the chart.

  D. When editing the chart, enter 'dns' in the Exclude Service field.

  Correct Answer: A

• Question 29:

  A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit.

  

  Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data to the FortiAnalyzer unit?

  A. The FortiGate unit is considered an unregistered device.

  B. The FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the administrator.

  C. The FortiGate unit has insufficient privileges. The administrator should edit the device entry in the FortiAnalyzer and modify the privileges.

  D. The FortiGate unit is being treated as a syslog device and is only permitted to send log data.

  Correct Answer: A

• Question 30:

  In order to load-share traffic using multiple static routes, the routes must be configured with ...

  A. the same distance and same priority.

  B. the same distance and the same weight.

  C. the same distance but each of them must be assigned a unique priority.

  D. a distance equal to its desired weight for ECMP but all must have the same priority.

  Correct Answer: A