FCNSA.V5 Online Practice Questions and Answers

Examine the exhibit shown below; then answer the question following it.

Which of the following statements best describes the green status indicators that appear next to the different FortiGuard Distribution Network services as illustrated in the exhibit?

A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Network.

B. They indicate that the FortiGate unit has the latest updates that are available from the FortiGuard Distribution Network.

C. They indicate that updates are available and should be downloaded from the FortiGuard Distribution Network to the FortiGate unit.

D. They indicate that the FortiGate unit is in the process of downloading updates from the FortiGuard Distribution Network.

Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

A. The proxy will not allow a file to be transmitted in multiple streams simultaneously.

B. The proxy sends the file to the server while simultaneously buffering it.

C. If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client.

D. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.

Which email filter is NOT available on a FortiGate device?

A. Sender IP reputation database.

B. URLs included in the body of known SPAM messages.

C. Email addresses included in the body of known SPAM messages.

D. Spam object checksums.

E. Spam grey listing.

Which part of an email message exchange is NOT inspected by the POP3 and IMAP proxies?

A. TCP connection

B. File attachments

C. Message headers

D. Message body

The FortiGate unit's GUI provides a link to update the firmware. Clicking this link will perform which of the following actions?

A. It will connect to the Fortinet Support site where the appropriate firmware version can be selected.

B. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.

C. It will present a prompt to allow browsing to the location of the firmware file.

D. It will automatically connect to the Fortinet Support site to download the most recent firmware version for the FortiGate unit.

Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.)

A. Firewall

B. Directory Service

C. Local

D. LDAP

E. PKI

An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet.

What must the user have for a suc- cessful authentication? (Select all that apply.)

A. An entry in a supported LDAP Directory.

B. A digital certificate issued by any CA server.

C. A valid username and password.

D. A digital certificate issued by the FortiGate unit.

E. Membership in a firewall user group.

By default the Intrusion Protection System (IPS) on a FortiGate unit is set to perform which ac- tion?

A. Block all network attacks.

B. Block the most common network attacks.

C. Allow all traffic.

D. Allow and log all traffic.

FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed.

What action must be taken for one of these profiles to become active?

A. The protection profile must be assigned to a firewall policy.

B. The "Use Protection Profile" option must be selected in the Web Config tool under the sec- tions for AntiVirus, IPS, WebFilter, and AntiSpam.

C. The protection profile must be set as the Active Protection Profile.

D. All of the above.

Which of the following statements correctly describes how a push update from the FortiGuard Distribution Network (FDN) works?

A. The FDN sends push updates only once.

B. The FDN sends package updates automatically to the FortiGate unit without requiring an up- date request.

C. The FDN continues to send push updates until the FortiGate unit sends an acknowledgement.

D. The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update.