Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 51:

  Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)

  A. An IP address pool.
  B. A virtual IP address.
  C. An actual IP address or an IP address group.
  D. An FQDN or Geographic value(s).
  B. A virtual IP address.
  C. An actual IP address or an IP address group.
  D. An FQDN or Geographic value(s).

• Question 52:

  Which of the following methods can be used to access the CLI? (Select all that apply.)

  A. By using a direct connection to a serial console.
  B. By using the CLI console window in Web Config.
  C. By using an SSH connection.
  D. By using a Telnet connection.
  A. By using a direct connection to a serial console.
  B. By using the CLI console window in Web Config.
  C. By using an SSH connection.
  D. By using a Telnet connection.

• Question 53:

  Which of the following are valid components of the Fortinet Server Authentication Extensions (FSAE)? t all that apply.)

  A. Domain Local Security Agent.
  B. Collector Agent.
  C. Active Directory Agent.
  D. User Authentication Agent.
  E. Domain Controller Agent.
  B. Collector Agent.
  E. Domain Controller Agent.

• Question 54:

  Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

  A. The FortiGate unit requires only a single IP address for receiving updates and configuring from a management computer.
  B. The FortiGate unit must use public IP addresses on both the internal and external networks.
  C. The FortiGate unit commonly uses private IP addresses on the internal network but hides them using rk address translation.
  D. The FortiGate unit uses only DHCP-assigned IP addresses on the internal network.
  C. The FortiGate unit commonly uses private IP addresses on the internal network but hides them using rk address translation.

• Question 55:

  If a FortiGate unit has a dmz interface IP address of 210.192.168.2 with a subnet mask of 255.255.255.0, what is a valid dmz DHCP addressing range?

  A. 172.168.0.1 - 172.168.0.10
  B. 210.192.168.3 - 210.192.168.10
  C. 210.192.168.1 - 210.192.168.4
  D. All of the above.
  B. 210.192.168.3 - 210.192.168.10

• Question 56:

  Which of the following products provides dedicated hardware to analyze log data from multiple FortiGate devices?

  A. FortiGate device
  B. FortiAnalyzer device
  C. FortiClient device
  D. FortiManager device
  E. FortiMail device
  F. FortiBridge device
  B. FortiAnalyzer device

• Question 57:

  A FortiGate unit can provide which of the following capabilities? (Select all that apply.)

  A. Email filtering
  B. Firewall
  C. VPN gateway
  D. Mail relay
  E. Mail server
  A. Email filtering
  B. Firewall
  C. VPN gateway

• Question 58:

  Which of the following statements best describes the green status indicators that appear next to different FortiGuard Distribution Network services as illustrated in the exhibit?

  

  A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Net- work.
  B. They indicate that the FortiGate unit has the latest updates that are available from the Forti- Guard Distribution Network.
  C. They indicate that updates are available and should be downloaded from the FortiGuard Dis- tribution Network to the FortiGate unit.
  D. They indicate that the FortiGate unit is in the process of downloading updates from the Forti- Guard Distribution Network.
  A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Net- work.

• Question 59:

  Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.)

  A. Firewall
  B. Directory Service
  C. Local
  D. LDAP
  E. PKI
  A. Firewall
  B. Directory Service

• Question 60:

  Which of the following Regular Expression patterns will make the term "bad language" case in- sensitive?

  A. [bad language]
  B. /bad language/i
  C. i/bad language/
  D. "bad language"
  E. /bad language/c
  B. /bad language/i