Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 11:

  Which of the following items is NOT a packet characteristic matched by a firewall service object?

  A. ICMP type and code
  B. TCP/UDP source and destination ports
  C. IP protocol number
  D. TCP sequence number
  D. TCP sequence number

• Question 12:

  Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.

  How are UTM features applied to traffic?

  A. One or more UTM features are enabled in a firewall policy.
  B. In the system configuration for that UTM feature, you can identify the policies to which the feature is to be applied.
  C. Enable the appropriate UTM objects and identify one of them as the default.
  D. For each UTM object, identify which policy will use it.
  A. One or more UTM features are enabled in a firewall policy.

• Question 13:

  The ordering of firewall policies is very important. Policies can be re-ordered within the FortiG- ate Web Config and also using the CLI. The command used in the CLI to perform this function is __________.

  A. set order
  B. edit policy
  C. reorder
  D. move
  D. move

• Question 14:

  What are the valid sub-types for a Firewall type policy? (Select all that apply)

  A. Device Identity
  B. Address
  C. User Identity
  D. Schedule
  E. SSL VPN
  A. Device Identity
  B. Address
  C. User Identity

• Question 15:

  In which order are firewall policies processed on the FortiGate unit?

  A. They are processed from the top down as they appear in Web Config.
  B. They are processed based on the policy ID number shown in the left hand column of the policy window.
  C. They are processed using a policy hierarchy scheme that allows for multiple decision branch- ing.
  D. They are processed based on a priority value assigned through the priority column in the policy window.
  A. They are processed from the top down as they appear in Web Config.

• Question 16:

  Which Fortinet products and features could be considered part of a comprehensive solution to monitor and prevent the leakage of senstive data? (Select all that apply.)

  A. Archive non-compliant outgoing e-mails using FortiMail.
  B. Restrict unofficial methods of transferring files such as P2P using Application Control lists on a FortiGate.
  C. Monitor database activity using FortiAnalyzer.
  D. Apply a DLP sensor to a firewall policy.
  E. Configure FortiClient to prevent files flagged as sensitive from being copied to a USB disk.
  A. Archive non-compliant outgoing e-mails using FortiMail.
  B. Restrict unofficial methods of transferring files such as P2P using Application Control lists on a FortiGate.
  D. Apply a DLP sensor to a firewall policy.

• Question 17:

  Which of the following email spam filtering features is NOT supported on a FortiGate unit?

  A. Multipurpose Internet Mail Extensions (MIME) Header Check
  B. HELO DNS Lookup
  C. Greylisting
  D. Banned Word
  C. Greylisting

• Question 18:

  Caching improves performance by reducing FortiGate unit requests to the FortiGuard server.

  Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.)

  A. Caching is available for web filtering, antispam, and IPS requests.
  B. The cache uses a small portion of the FortiGate system memory.
  C. When the cache is full, the least recently used IP address or URL is deleted from the cache.
  D. An administrator can configure the number of seconds to store information in the cache be- fore the FortiGate unit contacts the FortiGuard server again.
  E. The size of the cache will increase to accomodate any number of cached queries.
  B. The cache uses a small portion of the FortiGate system memory.
  C. When the cache is full, the least recently used IP address or URL is deleted from the cache.
  D. An administrator can configure the number of seconds to store information in the cache be- fore the FortiGate unit contacts the FortiGuard server again.

• Question 19:

  When firewall policy authentication is enabled, only traffic on supported protocols will trigger an authentication challenge. Select all supported protocols from the following:

  A. SMTP
  B. SSH
  C. HTTP
  D. FTP
  E. SCP
  C. HTTP
  D. FTP

• Question 20:

  Which email filter is NOT available on a FortiGate device?

  A. Sender IP reputation database.
  B. URLs included in the body of known SPAM messages.
  C. Email addresses included in the body of known SPAM messages.
  D. Spam object checksums.
  E. Spam grey listing.
  E. Spam grey listing.