Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 21:

  Which of the following authentication types are supported by FortiGate units? (Select all that apply.)

  A. Kerberos
  B. LDAP
  C. RADIUS
  D. Local Users
  B. LDAP
  C. RADIUS
  D. Local Users

• Question 22:

  Which of the following Fortinet products can receive updates from the FortiGuard Distribution Network? (Select all that apply.)

  A. FortiGate
  B. FortiClient
  C. FortiMail
  D. FortiAnalyzer
  A. FortiGate
  B. FortiClient
  C. FortiMail

• Question 23:

  A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profiles applied to this policy. Exhibit A:

  

  Exhibit B:

  

  What is the correct behavior when the email attachment is detected as a virus by the FortiGate antivirus engine?

  A. The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected.
  B. The FortiGate unit will reject the infected email and the sender will receive a failed delivery message.
  C. The FortiGate unit will remove the infected file and add a replacement message. Both sender and recipient are notified that the infected file has been removed.
  D. The FortiGate unit will reject the infected email and notify the sender.
  B. The FortiGate unit will reject the infected email and the sender will receive a failed delivery message.

• Question 24:

  Which of the following statements are correct regarding logging to memory on a FortiGate unit? (Select all that apply.)

  A. When the system has reached its capacity for log messages, the FortiGate unit will stop log- ging to memory.
  B. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.
  C. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.
  D. None of the above.
  B. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.
  C. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.

• Question 25:

  When creating administrative users which of the following configuration objects determines access rights on the FortiGate unit.

  A. profile
  B. allowaccess interface settings
  C. operation mode
  D. local-in policy
  A. profile

• Question 26:

  Which of the following statements correctly describes how a FortiGate unit functions in Trans- parent mode?

  A. To manage the FortiGate unit, one of the interfaces must be designated as the management in-terface. This interface may not be used for forwarding data.
  B. An IP address is used to manage the FortiGate unit but this IP address is not associated with a specific interface.
  C. The FortiGate unit must use public IP addresses on the internal and external networks.
  D. The FortiGate unit uses private IP addresses on the internal network but hides them using ad- dress translation.
  B. An IP address is used to manage the FortiGate unit but this IP address is not associated with a specific interface.

• Question 27:

  The default administrator profile that is assigned to the default "admin" user on a FortGate device is:____________________.

  A. trusted-admin
  B. super_admin
  C. super_user
  D. admin
  E. fortinet-root
  B. super_admin

• Question 28:

  When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password.

  If the password is forgotten, the configuration file can still be restored using which of the following methods?

  A. Selecting the recover password option during the restore process.
  B. Having the password emailed to the administrative user by selecting the Forgot Password option.
  C. Sending the configuration file to Fortinet Support for decryption.
  D. If the password is forgotten, there is no way to use the file.
  D. If the password is forgotten, there is no way to use the file.

• Question 29:

  Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

  A. The proxy will not allow a file to be transmitted in multiple streams simultaneously.
  B. The proxy sends the file to the server while simultaneously buffering it.
  C. If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client.
  D. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.
  A. The proxy will not allow a file to be transmitted in multiple streams simultaneously.

• Question 30:

  UTM features can be applied to which of the following items?

  A. Firewall policies
  B. User groups
  C. Policy routes
  D. Address groups
  A. Firewall policies