Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 31:

  Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

  A. The FortiGate unit can filter URLs based on patterns using text and regular expressions.
  B. The available actions for URL Filtering are Allow and Block.
  C. Multiple URL Filter lists can be added to a single Web filter profile.
  D. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.
  A. The FortiGate unit can filter URLs based on patterns using text and regular expressions.

• Question 32:

  In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel between two separate private networks.

  Which of the following configuration steps must be performed on both FortiGate units to support this configuration? (Select all that apply.)

  A. Create firewall policies to control traffic between the IP source and destination address.
  B. Configure the appropriate user groups on the FortiGate units to allow users access to the IPSec VPN connection.
  C. Set the operating mode of the FortiGate unit to IPSec VPN mode.
  D. Define the Phase 2 parameters that the FortiGate unit needs to create a VPN tunnel with the remote peer.
  E. Define the Phase 1 parameters that the FortiGate unit needs to authenticate the remote peers.
  A. Create firewall policies to control traffic between the IP source and destination address.
  D. Define the Phase 2 parameters that the FortiGate unit needs to create a VPN tunnel with the remote peer.
  E. Define the Phase 1 parameters that the FortiGate unit needs to authenticate the remote peers.

• Question 33:

  Because changing the operational mode to Transparent resets device (or vdom) to all defaults, which precautions should an Administrator take prior to performing this? (Select all that apply.)

  A. Backup the configuration.
  B. Disconnect redundant cables to ensure the topology will not contain layer 2 loops.
  C. Set the unit to factory defaults.
  D. Update IPS and AV files.
  A. Backup the configuration.
  B. Disconnect redundant cables to ensure the topology will not contain layer 2 loops.

• Question 34:

  The __________CLI command is used on the FortiGate unit to run static commands such as ping or to reset the FortiGate unit to factory defaults.

  execute

• Question 35:

  Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

  A. The available actions for URL Filtering are Allow and Block.
  B. Multiple URL Filter lists can be added to a single Web filter profile.
  C. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.
  D. The available actions for URL Filtering are Allow, Block and Exempt.
  D. The available actions for URL Filtering are Allow, Block and Exempt.

• Question 36:

  In order to match an identity-based policy, the FortiGate unit checks the IP information. Once inside the policy, the following logic is followed:

  A. First, a check is performed to determine if the user's login credentials are valid. Next, the user is checked to determine if they belong to any of the groups defined for that policy. Finally, user restrictions are determined and port, time, and UTM profiles are applied.
  B. First, user restrictions are determined and port, time, and UTM profiles are applied. Next, a check is performed to determine if the user's login credentials are valid. Finally, the user is checked to determine if they belong to any of the groups defined for that policy.
  C. First, the user is checked to determine if they belong to any of the groups defined for that policy. Next, user restrictions are determined and port, time, and UTM profiles are applied. Finally, a check is performed to determine if the user's login credentials are valid.
  A. First, a check is performed to determine if the user's login credentials are valid. Next, the user is checked to determine if they belong to any of the groups defined for that policy. Finally, user restrictions are determined and port, time, and UTM profiles are applied.

• Question 37:

  Examine the exhibit shown below; then answer the question following it.

  

  Which of the following statements best describes the green status indicators that appear next to the different FortiGuard Distribution Network services as illustrated in the exhibit?

  A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Network.
  B. They indicate that the FortiGate unit has the latest updates that are available from the FortiGuard Distribution Network.
  C. They indicate that updates are available and should be downloaded from the FortiGuard Distribution Network to the FortiGate unit.
  D. They indicate that the FortiGate unit is in the process of downloading updates from the FortiGuard Distribution Network.
  A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Network.

• Question 38:

  Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block.

  Which of the following statements regarding overrides is NOT correct?

  A. A web filter profile may only have one user group defined as an override group.
  B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
  C. When requesting an override, the matched user must belong to a user group for which the override capabilty has been enabled.
  D. Overrides can be allowed by the administrator for a specific period of time.
  A. A web filter profile may only have one user group defined as an override group.

• Question 39:

  Which of the following methods can be used to access the CLI? (Select all that apply.)

  A. By using a direct connection to a serial console.
  B. By using the CLI console window in the GUI.
  C. By using an SSH connection.
  D. By using a Telnet connection.
  A. By using a direct connection to a serial console.
  B. By using the CLI console window in the GUI.
  C. By using an SSH connection.
  D. By using a Telnet connection.

• Question 40:

  The command structure of the FortiGate CLI consists of commands, objects, branches, tables, and parameters. Which of the following items describes user?

  A. A command.
  B. An object.
  C. A table.
  D. A parameter.
  B. An object.