Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 91:

  Which of the following statements regarding the firewall policy authentication timeout is true?

  A. The authentication timeout is an idle timeout. This means that the FortiGate unit will consider a user to be "idle" if it does not see any packets coming from the user's source IP.
  B. The authentication timeout is a hard timeout. This means that the FortiGate unit will remove the temporary policy for this user's source IP after this timer has expired.
  C. The authentication timeout is an idle timeout. This means that the FortiGate unit will consider a user to be "idle" if it does not see any packets coming from the user's source MAC.
  D. The authentication timeout is a hard timeout. This means that the FortiGate unit will remove the temporary policy for this user's source MAC after this timer has expired.
  A. The authentication timeout is an idle timeout. This means that the FortiGate unit will consider a user to be "idle" if it does not see any packets coming from the user's source IP.

• Question 92:

  What is the FortiGate unit password recovery process?

  A. Interupt boot sequence, modify the boot registry and reboot. After changing the password, re- set the boot registry.
  B. Log in through the console port using the maintainer account within several minutes of a re- boot.
  C. Hold CTRL + break during reboot and reset the admin password.
  D. The only way to regain access is to interrupt boot sequence and restore a configuration file for which the password has been modified.
  B. Log in through the console port using the maintainer account within several minutes of a re- boot.

• Question 93:

  In NAT/Route mode when there is no matching firewall policy for traffic to be forwarded by the Firewall, of the following statements describes the action taken on traffic?

  A. The traffic is blocked.
  B. The traffic is passed.
  C. The traffic is passed and logged.
  D. The traffic is blocked and logged.
  A. The traffic is blocked.

• Question 94:

  In addition to AntiVirus services, the FortiGuard Subscription Services provide IPS, Web Filter- ing, and ___________ services.

  antispam

• Question 95:

  Which of the following statements correctly describes how a push update from the FortiGuard Distribution Network (FDN) works?

  A. The FDN sends push updates only once.
  B. The FDN sends package updates automatically to the FortiGate unit without requiring an up- date request.
  C. The FDN continues to send push updates until the FortiGate unit sends an acknowledgement.
  D. The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update.
  D. The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update.

• Question 96:

  Which of the following options can you use to update the virus definitions on a FortiGate unit? (Select all that apply.)

  A. Push update
  B. Scheduled update
  C. Manual update
  D. FTP update
  A. Push update
  B. Scheduled update
  C. Manual update

• Question 97:

  Which of the following statements are true regarding Local User Authentication? (Select all that apply.)

  A. Local user authentication is based on usernames and passwords stored locally on the FortiGate unit.
  B. Two-factor authentication can be enabled on a per user basis.
  C. Administrators can create an account for the user locally and specify the remote server to verify the password.
  D. Local users are for administration accounts only and cannot be used for identity policies.
  A. Local user authentication is based on usernames and passwords stored locally on the FortiGate unit.
  B. Two-factor authentication can be enabled on a per user basis.
  C. Administrators can create an account for the user locally and specify the remote server to verify the password.

• Question 98:

  By default the Intrusion Protection System (IPS) on a FortiGate unit is set to perform which ac- tion?

  A. Block all network attacks.
  B. Block the most common network attacks.
  C. Allow all traffic.
  D. Allow and log all traffic.
  C. Allow all traffic.

• Question 99:

  An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The tunnel will start up for a few seconds, then shut down. Which of the following statements best describes how to resolve this issue?

  A. This user does not have permission to enable tunnel mode. Make sure that the tunnel mode widget has been added to that user's web portal.
  B. This FortiGate unit may have multiple Internet connections. To avoid this problem, use the appropriate CLI command to bind the SSL VPN connection to the original incoming interface.
  C. Check the SSL adaptor on the host machine. If necessary, uninstall and reinstall the adaptor from the tunnel mode portal.
  D. Make sure that only Internet Explorer is used. All other browsers are unsupported.
  B. This FortiGate unit may have multiple Internet connections. To avoid this problem, use the appropriate CLI command to bind the SSL VPN connection to the original incoming interface.

• Question 100:

  Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides are cor- rect? (Select all that apply.)

  A. A protection profile may have only one user group defined as an override group.
  B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
  C. Authentication to allow the override is based on a user's membership in a user group.
  D. Overrides can be allowed by the administrator for a specific period of time.
  B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
  C. Authentication to allow the override is based on a user's membership in a user group.
  D. Overrides can be allowed by the administrator for a specific period of time.