Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 41:

  When browsing to an internal web server using a web-mode SSL VPN bookmark, from which of the following source IP addresses would the web server consider the HTTP request to be initiated?

  A. The remote user's virtual IP address.
  B. The FortiGate unit's internal IP address.
  C. The remote user's public IP address.
  D. The FortiGate unit's external IP address.
  B. The FortiGate unit's internal IP address.

• Question 42:

  Which part of an email message exchange is NOT inspected by the POP3 and IMAP proxies?

  A. TCP connection
  B. File attachments
  C. Message headers
  D. Message body
  A. TCP connection

• Question 43:

  Encrypted backup files provide which of the following benefits? (Select all that apply.)

  A. Integrity of the backup file is protected since it cannot be easily modified when encrypted.
  B. Prevents the backup file from becoming corrupted.
  C. Protects details of the device's configuration settings from being discovered while the backup file is in transit. For example, transferred to a data centers for system recovery.
  D. A copy of the encrypted backup file is automatically pushed to the FortiGuard Distribution Service (FDS) for disaster recovery purposes. If the backup file becomes corrupt it can be retrieved through FDS.
  E. Fortinet Technical Support can recover forgotten passwords with a backdoor passphrase.
  A. Integrity of the backup file is protected since it cannot be easily modified when encrypted.
  C. Protects details of the device's configuration settings from being discovered while the backup file is in transit. For example, transferred to a data centers for system recovery.

• Question 44:

  What is the FortiGate unit password recovery process?

  A. Interrupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry.
  B. Log in through the console port using the "maintainer" account within approximately 30 seconds of a reboot.
  C. Hold down the CTRL + Esc (Escape) keys during reboot, then reset the admin password.
  D. The only way to regain access is to interrupt the boot sequence and restore a configuration file for which the password has been modified.
  B. Log in through the console port using the "maintainer" account within approximately 30 seconds of a reboot.

• Question 45:

  A FortiGate unit can create a secure connection to a client using SSL VPN in tunnel mode.

  Which of the owing statements are correct regarding the use of tunnel mode SSL VPN? (Se- lect all that apply.)

  A. Split tunneling can be enabled when using tunnel mode SSL VPN.
  B. Software must be downloaded to the web client to be able to use a tunnel mode SSL VPN.
  C. Users attempting to create a tunnel mode SSL VPN connection must be members of a con- figured user group on the FortiGate unit.
  D. Tunnel mode SSL VPN requires the FortiClient software to be installed on the user's com- puter.
  E. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.
  A. Split tunneling can be enabled when using tunnel mode SSL VPN.
  B. Software must be downloaded to the web client to be able to use a tunnel mode SSL VPN.
  C. Users attempting to create a tunnel mode SSL VPN connection must be members of a con- figured user group on the FortiGate unit.
  E. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.

• Question 46:

  You wish to create a firewall policy that applies only to traffic intended for your web server. The server has an IP address of 192.168.2.2 and belongs to a class C subnet. When defining the fire- wall address for use in this policy, which one of the following addressing formats is correct?

  A. 192.168.2.0 / 255.255.255.0
  B. 192.168.2.2 / 255.255.255.0
  C. 192.168.2.0 / 255.255.255.255
  D. 192.168.2.2 / 255.255.255.255
  D. 192.168.2.2 / 255.255.255.255

• Question 47:

  An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet.

  What must the user have for a suc- cessful authentication? (Select all that apply.)

  A. An entry in a supported LDAP Directory.
  B. A digital certificate issued by any CA server.
  C. A valid username and password.
  D. A digital certificate issued by the FortiGate unit.
  E. Membership in a firewall user group.
  B. A digital certificate issued by any CA server.
  E. Membership in a firewall user group.

• Question 48:

  The command structure of the CLI on a FortiGate unit consists of commands, objects, branches, tables and parameters. Which of the following items describes port1?

  A. A command.
  B. An object.
  C. A table.
  D. A parameter.
  C. A table.

• Question 49:

  Alert emails enable the FortiGate unit to send email notifications to an email address upon detec- tion of a pre-defined event type.

  Which of the following are some of the available event types in Web Config? (Select all that apply.)

  A. Intrusion detected.
  B. Successful firewall authentication.
  C. Oversized file detected.
  D. DHCP address assigned.
  E. FortiGuard Web Filtering rating error detected.
  A. Intrusion detected.

• Question 50:

  Which of the following statements describes the method of creating a policy to block access to an FTP site?

  A. Enable Web Filter URL blocking and add the URL of the FTP site to the URL Block list.
  B. Create a firewall policy with destination address set to the IP address of the FTP site, the Ser- vice set to FTP, and the Action set to Deny.
  C. Create a firewall policy with a protection profile containing the Block FTP option enabled.
  D. None of the above.
  B. Create a firewall policy with destination address set to the IP address of the FTP site, the Ser- vice set to FTP, and the Action set to Deny.