Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 1:

  Which of the following items does NOT support the Logging feature?

  A. File Filter
  B. Application control
  C. Session timeouts
  D. Administrator activities
  E. Web URL filtering
  C. Session timeouts

• Question 2:

  A FortiGate unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which of the following statements are possible reasons for this? (Select all that apply.)

  A. The external facing interface of the FortiGate unit is configured to use DHCP.
  B. The FortiGate unit has not been registered.
  C. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network and no override push IP is configured.
  D. The FortiGate unit is in Transparent mode which does not support push updates.
  A. The external facing interface of the FortiGate unit is configured to use DHCP.
  B. The FortiGate unit has not been registered.
  C. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network and no override push IP is configured.

• Question 3:

  A FortiGate unit can act as which of the following? (Select all that apply.)

  A. Antispam filter
  B. Firewall
  C. VPN gateway
  D. Mail relay
  E. Mail server
  A. Antispam filter
  B. Firewall
  C. VPN gateway

• Question 4:

  Which statement is correct regarding virus scanning on a FortiGate unit?

  A. Virus scanning is enabled by default.
  B. Fortinet Customer Support enables virus scanning remotely for you.
  C. Virus scanning must be enabled in a protection profile and the protection profile must be as- signed to a firewall policy.
  D. Enabling virus scanning in a protection profile enables virus scanning for all traffic flowing through the FortiGate.
  C. Virus scanning must be enabled in a protection profile and the protection profile must be as- signed to a firewall policy.

• Question 5:

  Which of the following statements are correct regarding URL filtering on the FortiGate unit? (Select all that apply.)

  A. The allowed actions for URL Filtering include Allow, Block and Exempt.
  B. The allowed actions for URL Filtering are Allow and Block.
  C. The FortiGate unit can filter URLs based on patterns using text and regular expressions.
  D. Any URL accessible by a web browser can be blocked using URL Filtering.
  E. Multiple URL Filter lists can be added to a single protection profile.
  A. The allowed actions for URL Filtering include Allow, Block and Exempt.
  C. The FortiGate unit can filter URLs based on patterns using text and regular expressions.

• Question 6:

  In which order are firewall policies processed on the FortiGate unit?

  A. They are processed from the top down according to their sequence number.
  B. They are processed based on the policy ID number shown in the left hand column of the policy window.
  C. They are processed on best match.
  D. They are processed based on a priority value assigned through the priority column in the policy window.
  A. They are processed from the top down according to their sequence number.

• Question 7:

  A FortiGate 100 unit is configured to receive push updates from the FortiGuard Distribution Net- work, however, updates are not being received.

  Which of the following statements are possible reasons for this? (Select all that apply.)

  A. The external facing interface of the FortiGate unit is configured to use DHCP.
  B. The FortiGate unit has not been registered.
  C. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network.
  D. The FortiGate unit is in Transparent mode.
  A. The external facing interface of the FortiGate unit is configured to use DHCP.
  B. The FortiGate unit has not been registered.
  C. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network.

• Question 8:

  Which of the following statements are true of the FortiGate unit's factory default configuration?

  A. `Port1' or `Internal' interface will have an IP of 192.168.1.99.
  B. `Port1' or `Internal' interface will have a DHCP server set up and enabled (on devices that support DHCP Servers).
  C. Default login will always be the username: admin (all lowercase) and no password.
  D. The implicit firewall action is ACCEPT.
  A. `Port1' or `Internal' interface will have an IP of 192.168.1.99.
  B. `Port1' or `Internal' interface will have a DHCP server set up and enabled (on devices that support DHCP Servers).
  C. Default login will always be the username: admin (all lowercase) and no password.

• Question 9:

  The FortiGate unit's GUI provides a link to update the firmware. Clicking this link will perform which of the following actions?

  A. It will connect to the Fortinet Support site where the appropriate firmware version can be selected.
  B. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.
  C. It will present a prompt to allow browsing to the location of the firmware file.
  D. It will automatically connect to the Fortinet Support site to download the most recent firmware version for the FortiGate unit.
  C. It will present a prompt to allow browsing to the location of the firmware file.

• Question 10:

  You wish to create a firewall policy that applies only to traffic intended for your web server. The web server has an IP address of 192.168.2.2 and a /24 subnet mask. When defining the firewall address for use in this policy, which one of the following addresses is correct?

  A. 192.168.2.0 / 255.255.255.0
  B. 192.168.2.2 / 255.255.255.0
  C. 192.168.2.0 / 255.255.255.255
  D. 192.168.2.2 / 255.255.255.255
  D. 192.168.2.2 / 255.255.255.255