Fortinet Certified Network Security Administrator (FCNSA.v5) - FCNSA.v5 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which of the following pieces of information can be included in the Destination Address field of a firewall policy?

A. Only an actual IP address. B. An actual IP address and an IP address group. C. A virtual IP address, an actual IP address, and an IP address group. D. An IP address pool, a virtual IP address, an actual IP address, and an IP address group.

Discussion 0

Correct Answer: C Vote an answer

Question 2

Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.
An administrator must assign a set of UTM features to a group of users.
Which of the following is the correct method for doing this?

A. Enable a set of unique UTM features under "Edit User Group". B. The administrator must apply the UTM features directly to a user object. C. When defining the UTM objects, the administrator must list the user groups which will use the UTM object. D. The administrator must enable the UTM features in an identify-based policy applicable to the user group.

Discussion 0

Correct Answer: D Vote an answer

Question 3

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides is NOT correct?

A. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering. B. A web filter profile may only have one user group defined as an override group. C. When requesting an override, the matched user must belong to a user group for which the override capabilty has been enabled. D. Overrides can be allowed by the administrator for a specific period of time.

Discussion 0

Correct Answer: B Vote an answer

Question 4

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides are correct?
(Select all that apply.)

A. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering. B. Overrides can be allowed by the administrator for a specific period of time. C. A protection profile may have only one user group defined as an override group. D. Authentication to allow the override is based on a user's membership in a user group.

Discussion 0

Correct Answer: A,B,D Vote an answer

Question 5

An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has enabled split tunneling.

Given that the user authenticates against the SSL VPN policy shown in the image below, which statement below identifies the route that is added to the client's routing table.

A. No route is added. B. A route to destination matching the 'WIN2K3' address object. C. A route to the destination matching the 'all' address object. D. A default route.

Discussion 0

Correct Answer: B Vote an answer

Question 6

Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

A. FortiAnalyzer B. Syslog C. LDAP D. Local disk and/or memory

Discussion 0

Correct Answer: A,B,D Vote an answer

Question 7

Which of the following statements correctly describes how a push update from the FortiGuard Distribution Network (FDN) works?

A. The FDN continues to send push updates until the FortiGate unit sends an acknowledgement. B. The FDN sends push updates only once. C. The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update. D. The FDN sends package updates automatically to the FortiGate unit without requiring an update request.

Discussion 0

Correct Answer: C Vote an answer

Question 8

A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profiles applied to this policy.
Exhibit A: Exhibit B:

What is the correct behavior when the email attachment is detected as a virus by the FortiGate antivirus engine?

A. The FortiGate unit will reject the infected email and the sender will receive a failed delivery message. B. The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected. C. The FortiGate unit will reject the infected email and notify the sender. D. The FortiGate unit will remove the infected file and add a replacement message. Both sender and recipient are notified that the infected file has been removed.

Discussion 0

Correct Answer: A Vote an answer