Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 71:

  An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network.

  Which of the following FortiAnalyzers will be detected? (Select all that apply.)

  A. 192.168.11.100
  B. 192.168.11.251
  C. 192.168.10.100
  D. 192.168.10.251
  A. 192.168.11.100
  B. 192.168.11.251

• Question 72:

  How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

  A. A static route must be configured by the administrator using the ssl.root interface as the outgoing interface.
  B. Assignment of an IP address to the client causes a host route to be added to the FortiGate unit's kernel routing table.
  C. A route back to the SSLVPN IP pool is automatically created on the FortiGate unit.
  D. The FortiGate unit adds a route based upon the destination address in the SSL VPN firewall policy.
  B. Assignment of an IP address to the client causes a host route to be added to the FortiGate unit's kernel routing table.

• Question 73:

  Under the System Information widget on the dashboard, which of the following actions are available for the system configuration? (Select all that apply.)

  A. Backup
  B. Restore
  C. Revisions
  D. Export
  A. Backup
  B. Restore
  C. Revisions

• Question 74:

  An end user logs into the SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has not enabled split tunneling and so the end user must ac- cess the Internet through the SSL VPN Tunnel.

  Which firewall policies are needed to allow the end user to not only access the internal network but also reach the Internet?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 75:

  Two-factor authentication is supported using the following methods? (Select all that apply.)

  A. FortiToken
  B. Email
  C. SMS phone message
  D. Code books
  A. FortiToken
  B. Email
  C. SMS phone message

• Question 76:

  Which of the following products is designed to manage multiple FortiGate devices?

  A. FortiGate device
  B. FortiAnalyzer device
  C. FortiClient device
  D. FortiManager device
  E. FortiMail device
  F. FortiBridge device
  D. FortiManager device

• Question 77:

  SSL content inspection is enabled on the FortiGate unit.

  Which of the following steps is required to prevent a user from being presented with a web browser warning when accessing an SSL-en- crypted website?

  A. The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the user's workstation.
  B. Disable the strict server certificate check in the web browser under Internet Options.
  C. Enable transparent proxy mode on the FortiGate unit.
  D. Enable NTLM authentication on the FortiGate unit. NTLM authentication suppresses the cer- tificate warning messages in the web browser.
  A. The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the user's workstation.

• Question 78:

  Which statement is correct regarding virus scanning on a FortiGate unit?

  A. Virus scanning is enabled by default.
  B. Fortinet Customer Support enables virus scanning remotely for you.
  C. Virus scanning must be enabled in a UTM security profile and the UTM security profile must be assigned to a firewall policy.
  D. Enabling virus scanning in a UTM security profile enables virus scanning for all traffic flowing through the FortiGate device.
  C. Virus scanning must be enabled in a UTM security profile and the UTM security profile must be assigned to a firewall policy.

• Question 79:

  Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

  A. LDAP
  B. Syslog
  C. FortiAnalyzer
  D. Local disk and/or memory
  B. Syslog
  C. FortiAnalyzer
  D. Local disk and/or memory

• Question 80:

  Which of the following antivirus and attack definition update options are supported by FortiGate units? (Select all that apply.)

  A. Manual update by downloading the signatures from the support site.
  B. Pull updates from the FortiGate device
  C. Push updates from the FortiGuard Distribution Network.
  D. "update-AV/AS" command from the CLI
  A. Manual update by downloading the signatures from the support site.
  B. Pull updates from the FortiGate device
  C. Push updates from the FortiGuard Distribution Network.