Fortinet FCNSA Online Practice Questions and Exam Preparation

Fortinet FCNSA Online Questions & Answers

• Question 81:

  Which of the following statements regarding Banned Words are correct? (Select all that apply.)

  A. The FortiGate unit can scan web pages and email messages for instances of banned words.
  B. When creating a banned word list, an administrator can indicate either specific words or patterns.
  C. Banned words can be expressed as simple text, wildcards or regular expressions.
  D. Content is automatically blocked if a single instance of a banned word appears.
  E. The FortiGate unit updates banned words on a periodic basis.
  A. The FortiGate unit can scan web pages and email messages for instances of banned words.
  B. When creating a banned word list, an administrator can indicate either specific words or patterns.
  C. Banned words can be expressed as simple text, wildcards or regular expressions.

• Question 82:

  Which of the following items represent the minimum configuration steps an administrator must perform to enable Data Leak Prevention for traffic flowing through the FortiGate unit? (Select all that apply.)

  A. Assign a DLP sensor in a firewall policy.
  B. Apply one or more DLP rules to a firewall policy.
  C. Enable DLP globally using the config sys dlp command in the CLI.
  D. Define one or more DLP rules.
  E. Define a DLP sensor.
  F. Apply a DLP sensor to a DoS sensor policy.
  A. Assign a DLP sensor in a firewall policy.
  D. Define one or more DLP rules.
  E. Define a DLP sensor.

• Question 83:

  A FortiGate unit can scan for viruses on which types of network traffic? (Select all that apply.)

  A. POP3
  B. FTP
  C. SMTP
  D. SNMP
  E. NetBios
  A. POP3
  B. FTP
  C. SMTP

• Question 84:

  Examine the firewall configuration shown below; then answer the question following it.

  

  Which of the following statements are correct based on the firewall configuration illustrated in the exhibit? (Select all that apply.)

  A. A user can access the Internet using only the protocols that are supported by user authentication.
  B. A user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP. These require authentication before the user will be allowed access.
  C. A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access any services.
  D. A user cannot access the Internet using any protocols unless the user has passed firewall authentication.
  A. A user can access the Internet using only the protocols that are supported by user authentication.
  D. A user cannot access the Internet using any protocols unless the user has passed firewall authentication.

• Question 85:

  Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

  A. The FortiGate unit applies NAT to all traffic.
  B. The FortiGate unit functions as a Layer 3 device.
  C. The FortiGate unit functions as a Layer 2 device.
  D. The FortiGate unit functions as a router and the firewall function is disabled.
  B. The FortiGate unit functions as a Layer 3 device.

• Question 86:

  The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate unit's GUI and also using the CLI. The command used in the CLI to perform this function is ______ .

  A. set order
  B. edit policy
  C. reorder
  D. move
  D. move

• Question 87:

  What is the effect of using CLI "config system session-ttl" to set session_ttl to 1800 seconds?

  A. Sessions can be idle for no more than 1800 seconds.
  B. The maximum length of time a session can be open is 1800 seconds.
  C. After 1800 seconds, the end user must reauthenticate.
  D. After a session has been open for 1800 seconds, the FortiGate unit will send a keepalive packet to both client and server.
  A. Sessions can be idle for no more than 1800 seconds.

• Question 88:

  You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You have chosen to use Interface Mode when configuring the VPN tunnel and you want users from either side to be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate unit already has a default route.

  Which of the following configuration steps are required to achieve these objectives? (Select all that apply.)

  A. Create one firewall policy.
  B. Create two firewall policies.
  C. Add a route for the remote subnet.
  D. Add a route for incoming traffic.
  E. Create a phase 1 definition.
  F. Create a phase 2 definition.
  B. Create two firewall policies.
  C. Add a route for the remote subnet.
  E. Create a phase 1 definition.
  F. Create a phase 2 definition.

• Question 89:

  A firewall policy has been configured such that traffic logging is disabled and a UTM function is enabled.

  In addition, the system setting `utm-incident-traffic-log' has been enabled. In which log will a UTM event message be stored?

  A. Traffic
  B. UTM
  C. System
  D. None
  A. Traffic

• Question 90:

  Which of the following antivirus and attack definition update features are supported by FortiGate units? (Select all that apply.)

  A. Manual, user-initiated updates from the FortiGuard Distribution Network.
  B. Hourly, daily, or weekly scheduled antivirus and attack definition and antivirus engine up- dates from the FortiGuard Distribution Network.
  C. Push updates from the FortiGuard Distribution Network.
  D. Update status including version numbers, expiry dates, and most recent update dates and times.
  A. Manual, user-initiated updates from the FortiGuard Distribution Network.
  B. Hourly, daily, or weekly scheduled antivirus and attack definition and antivirus engine up- dates from the FortiGuard Distribution Network.
  C. Push updates from the FortiGuard Distribution Network.
  D. Update status including version numbers, expiry dates, and most recent update dates and times.