Fortinet Certified Network Security Professional (FCNSP.v5) - FCNSP.v5 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

A DLP rule with an action of Exempt has been matched against traffic passing through the FortiGate unit. Which of the following statements is correct regarding how this transaction will be handled by the FortiGate unit?

A. Any other matched DLP rules will be ignored with the exception of Archiving. B. The client IP address will be added to a white list. C. Future files whose characteristics match this file will bypass DLP scanning. D. The traffic matching the DLP rule will bypass antivirus scanning.

Discussion 0

Correct Answer: A Vote an answer

Question 2

A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit.

Which of the following statements are true if the network administrator wants to route traffic between all the VDOMs? (Select all that apply.)

A. As with all FortiGate unit interfaces, firewall policies must be in place for traffic to be allowed to pass through any interface, including inter-VDOM links. This provides the same level of security internally as externally. B. This configuration requires the use of an external router. C. As each VDOM has an independant routing table, routing rules need to be set (for example, static routing, OSPF) in each VDOM to route traffic between VDOMs. D. The administrator should configure inter-VDOM links to avoid using external interfaces and routers. E. Inter-VDOM routing is automatically provided if all the subnets that need to be routed are locally attached.

Discussion 0

Correct Answer: A,C,D Vote an answer

Question 3

An administrator logs into a FortiGate unit using an account which has been assigned a super_admin profile. Which of the following operations can this administrator perform?

A. They can delete logged-in users who are also assigned the super_admin access profile. B. They can access configuration options for only the VDOMs to which they have been assigned. C. They can make changes to the super_admin profile. D. They can delete the admin account if the default admin user is not logged in. E. They can view all the system configuration settings but can not make changes.

Discussion 0

Correct Answer: D Vote an answer

Question 4

Review the output of the command config router ospf shown in the Exhibit below; then answer the
question following it.

Which one of the following statements is correct regarding this output?

A. OSPF Hello packets will be sent on all interfaces configured with an address matching the 10.0.1.0/24 and 172.16.0.0/12 networks. B. OSPF Hello packets will be sent on all interfaces of the FortiGate device. C. OSPF Hello packets are not sent on point-to-point networks. D. OSPF Hello packets will only be sent on interfaces configured with the IP addresses 172.16.1.1 and 172.16.1.2.

Discussion 0

Correct Answer: A Vote an answer

Question 5

Which of the following statements best decribes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

A. The proxy sends the file to the server while simultaneously buffering it. B. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server. C. The proxy removes the infected file from the server by sending a delete command on behalf of the client. D. The proxy buffers the entire file from the client, only sending the file to the server if the file is clean. One possible consequence of buffering is that the server could time out.

Discussion 0

Correct Answer: D Vote an answer

Question 6

What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)

A. Only applies to UDP and ICMP connections. B. Connections must not be handled by a proxy. C. Enable session pick-up. D. Only applies to connections handled by a proxy.

Discussion 0

Correct Answer: B,C Vote an answer

Question 7

Data Leak Prevention archiving gives the ability to store files and message data onto a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)

A. IPSec B. POP3 C. SNMP D. HTTP E. SMTP

Discussion 0

Correct Answer: B,D,E Vote an answer

Question 8

Which of the following statements correctly describes the deepscan option for HTTPS?

A. Enabling deepscan will perform further checks on the server certificate. B. When deepscan is disabled, only the web server certificate is inspected; no decryption of content occurs. C. With deepscan enabled, archived files will be decompressed before scanning for a more comprehensive file inspection. D. Deepscan is only applicable to mail protocols, where all IP addresses in the header are checked.

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which of the following tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Select all that apply.)

A. Communication with the urlfilter process. B. The web client SSL handshake. C. The web server SSL handshake. D. File buffering.

Discussion 0

Correct Answer: B,C Vote an answer