Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 61:

  FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed. What action must be taken for one of these profiles to become active?

  A. The protection profile must be assigned to a firewall policy.
  B. The "Use Protection Profile" option must be selected in the Web Config tool under the sec- tions for AntiVirus, IPS, WebFilter, and AntiSpam.
  C. The protection profile must be set as the Active Protection Profile.
  D. All of the above.
  A. The protection profile must be assigned to a firewall policy.

• Question 62:

  Which of the following products can be installed on a computer running Windows XP to provide personal firewall protection, antivirus protection, web and mail filtering, spam filtering, and VPN functionality?

  A. FortiGate
  B. FortiAnalyzer
  C. FortiClient
  D. FortiManager
  E. FortiReporter
  C. FortiClient

• Question 63:

  DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)

  A. SNMP
  B. IPSec
  C. SMTP
  D. POP3
  E. HTTP
  C. SMTP
  D. POP3
  E. HTTP

• Question 64:

  A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?

  A. Proxy
  B. DNS
  C. Flow-based
  D. Man-in-the-middle
  C. Flow-based

• Question 65:

  Which of the following pieces of information can be included in the Destination Address field of a firewall policy?

  A. An IP address pool, a virtual IP address, an actual IP address, and an IP address group.
  B. A virtual IP address, an actual IP address, and an IP address group.
  C. An actual IP address and an IP address group.
  D. Only an actual IP address.
  B. A virtual IP address, an actual IP address, and an IP address group.

• Question 66:

  Which of the following spam filtering methods are supported on the FortiGate unit? (Select all that apply.)

  A. IP Address Check
  B. Open Relay Database List (ORDBL)
  C. Black/White List
  D. Return Email DNS Check
  E. Email Checksum Check
  A. IP Address Check
  B. Open Relay Database List (ORDBL)
  C. Black/White List
  D. Return Email DNS Check
  E. Email Checksum Check

• Question 67:

  A client can create a secure connection to a FortiGate device using SSL VPN in web-only mode. Which one of the following statements is correct regarding the use of web-only mode SSL VPN?

  A. Web-only mode supports SSL version 3 only.
  B. A Fortinet-supplied plug-in is required on the web client to use web-only mode SSL VPN.
  C. Web-only mode requires the user to have a web browser that supports 64-bit cipher length.
  D. The JAVA run-time environment must be installed on the client to be able to connect to a web-only mode SSL VPN.
  C. Web-only mode requires the user to have a web browser that supports 64-bit cipher length.

• Question 68:

  Which of the following is true regarding Switch Port Mode?

  A. Allows all internal ports to share the same subnet.
  B. Provides separate routable interfaces for each internal port.
  C. An administrator can select ports to be used as a switch.
  D. Configures ports to be part of the same broadcast domain.
  A. Allows all internal ports to share the same subnet.

• Question 69:

  Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.)

  A. Forward-only
  B. Non-recursive
  C. Recursive
  D. Iterative
  E. Conditional-forward
  A. Forward-only
  B. Non-recursive
  C. Recursive

• Question 70:

  When creating administrative users, the assigned _____________determines user rights on the FortiGate unit.

  access profile