Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 101:

  Which of the following regular expression patterns will make the terms "confidential data" case insensitive?

  A. \[confidential data]
  B. /confidential data/i
  C. i/confidential data/
  D. "confidential data"
  E. /confidential data/c
  B. /confidential data/i

• Question 102:

  An administrator wants to assign a set of UTM features to a group of users. Which of the following is the correct method for doing this?

  A. Enable a set of unique UTM profiles under "Edit User Group".
  B. The administrator must enable the UTM profiles in an identity-based policy applicable to the user group.
  C. When defining the UTM objects, the administrator must list the user groups which will use the UTM object.
  D. The administrator must apply the UTM features directly to a user object.
  B. The administrator must enable the UTM profiles in an identity-based policy applicable to the user group.

• Question 103:

  The Idle Timeout setting on a FortiGate unit applies to which of the following?

  A. Web browsing
  B. FTP connections
  C. User authentication
  D. Administrator access
  E. Web filtering overrides.
  D. Administrator access

• Question 104:

  Which of the following is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying the FortiGate unit?

  A. Packet encryption
  B. MIB-based report uploads
  C. SNMP access limits through access lists
  D. Running SNMP service on a non-standard port is possible
  A. Packet encryption

• Question 105:

  An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has enabled split tunneling.

  

  Given that the user authenticates against the SSL VPN policy shown in the image below, which statement below identifies the route that is added to the client's routing table.

  A. A route to destination matching the `WIN2K3' address object.
  B. A route to the destination matching the `all' address object.
  C. A default route.
  D. No route is added.
  A. A route to destination matching the `WIN2K3' address object.

• Question 106:

  Which of the following components are contained in all FortiGate units from the FG50 models and up? (Select all that apply.)

  A. FortiASIC content processor.
  B. Hard Drive.
  C. Gigabit network interfaces.
  D. Serial console port.
  A. FortiASIC content processor.
  D. Serial console port.

• Question 107:

  The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process. Which of the following are valid authentication protocols that can be used when a user authentic- ates to the RADIUS server? (Select all that apply.)

  A. MS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2)
  B. PAP (Password Authentication Protocol)
  C. CHAP (Challenge-Handshake Authentication Protocol)
  D. MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1)
  E. FAP (FortiGate Authentication Protocol)
  A. MS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2)
  B. PAP (Password Authentication Protocol)
  C. CHAP (Challenge-Handshake Authentication Protocol)
  D. MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1)

• Question 108:

  A FortiGate 60 unit is configured for your small office. The DMZ interface is connected to a net- work containing a web server and email server. The Internal interface is connected to a network containing 10 user workstations and the WAN1 interface is connected to your ISP.

  You want to configure firewall policies so that your users can send and receive email messages to the email server on the DMZ network. You also want the email server to be able to retrieve email messages from an email server hosted by your ISP using the POP3 protocol.

  Which policies must be created for this communication? (Select all that apply.)

  A. Internal > DMZ
  B. DMZ > Internal
  C. Internal > WAN1
  D. WAN1 > Internal
  E. DMZ > WAN1
  F. WAN1 > DMZ
  A. Internal > DMZ
  E. DMZ > WAN1

• Question 109:

  If no firewall policy is specified between two FortiGate interfaces and zones are not used, which of the following statements describes the action taken on traffic flowing between these inter- faces?

  A. The traffic is blocked.
  B. The traffic is passed.
  C. The traffic is passed and logged.
  D. The traffic is blocked and logged.
  A. The traffic is blocked.

• Question 110:

  A FortiAnalyzer device could use which security method to secure the transfer of log data from FortiGate devices?

  A. SSL
  B. IPSec
  C. direct serial connection
  D. S/MIME
  B. IPSec