FCNSA.V5 Online Practice Questions and Answers

How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

A. A static route must be configured by the administrator using the ssl.root interface as the outgoing interface.

B. Assignment of an IP address to the client causes a host route to be added to the FortiGate unit's kernel routing table.

C. A route back to the SSLVPN IP pool is automatically created on the FortiGate unit.

D. The FortiGate unit adds a route based upon the destination address in the SSL VPN firewall policy.

Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

A. The proxy will not allow a file to be transmitted in multiple streams simultaneously.

B. The proxy sends the file to the server while simultaneously buffering it.

C. If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client.

D. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.

Which of the following products is designed to manage multiple FortiGate devices?

A. FortiGate device

B. FortiAnalyzer device

C. FortiClient device

D. FortiManager device

E. FortiMail device

F. FortiBridge device

Which of the following products provides dedicated hardware to analyze log data from multiple FortiGate devices?

A. FortiGate device

B. FortiAnalyzer device

C. FortiClient device

D. FortiManager device

E. FortiMail device

F. FortiBridge device

An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet.

What must the user have for a suc- cessful authentication? (Select all that apply.)

A. An entry in a supported LDAP Directory.

B. A digital certificate issued by any CA server.

C. A valid username and password.

D. A digital certificate issued by the FortiGate unit.

E. Membership in a firewall user group.

Which of the following statements describes the method of creating a policy to block access to an FTP site?

A. Enable Web Filter URL blocking and add the URL of the FTP site to the URL Block list.

B. Create a firewall policy with destination address set to the IP address of the FTP site, the Ser- vice set to FTP, and the Action set to Deny.

C. Create a firewall policy with a protection profile containing the Block FTP option enabled.

D. None of the above.

UTM features can be applied to which of the following items?

A. Firewall policies

B. User groups

C. Policy routes

D. Address groups

Which of the following network protocols can be used to access a FortiGate unit as an adminis- trator?

A. HTTPS, HTTP, SSH, TELNET, PING, SNMP

B. FTP, HTTPS, NNTP, TCP, WINS

C. HTTP, NNTP, SMTP, DHCP

D. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS

E. Telnet, UDP, NNTP, SMTP

Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.

An administrator must assign a set of UTM features to a group of users.

Which of the following is the correct method for doing this?

A. Enable a set of unique UTM features under "Edit User Group".

B. The administrator must enable the UTM features in an identify-based policy applicable to the user group.

C. When defining the UTM objects, the administrator must list the user groups which will use the UTM object.

D. The administrator must apply the UTM features directly to a user object.

Which of the following statements are correct regarding logging to memory on a FortiGate unit? (Select all that apply.)

A. When the system has reached its capacity for log messages, the FortiGate unit will stop log- ging to memory.

B. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.

C. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.

D. None of the above.