FCNSA.V5 Online Practice Questions and Answers

Which of the following email spam filtering features is NOT supported on a FortiGate unit?

A. Multipurpose Internet Mail Extensions (MIME) Header Check

B. HELO DNS Lookup

C. Greylisting

D. Banned Word

You wish to create a firewall policy that applies only to traffic intended for your web server. The web server has an IP address of 192.168.2.2 and a /24 subnet mask. When defining the firewall address for use in this policy, which one of the following addresses is correct?

A. 192.168.2.0 / 255.255.255.0

B. 192.168.2.2 / 255.255.255.0

C. 192.168.2.0 / 255.255.255.255

D. 192.168.2.2 / 255.255.255.255

Which of the following network protocols are supported for administrative access to a FortiGate unit?

A. HTTPS, HTTP, SSH, TELNET, PING, SNMP

B. FTP, HTTPS, NNTP, TCP, WINS

C. HTTP, NNTP, SMTP, DHCP

D. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS

E. Telnet, UDP, NNTP, SMTP

The FortiGate unit's GUI provides a link to update the firmware. Clicking this link will perform which of the following actions?

A. It will connect to the Fortinet Support site where the appropriate firmware version can be selected.

B. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.

C. It will present a prompt to allow browsing to the location of the firmware file.

D. It will automatically connect to the Fortinet Support site to download the most recent firmware version for the FortiGate unit.

Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

A. LDAP

B. Syslog

C. FortiAnalyzer

D. Local disk and/or memory

Which of the following antivirus and attack definition update features are supported by FortiGate units? (Select all that apply.)

A. Manual, user-initiated updates from the FortiGuard Distribution Network.

B. Hourly, daily, or weekly scheduled antivirus and attack definition and antivirus engine up- dates from the FortiGuard Distribution Network.

C. Push updates from the FortiGuard Distribution Network.

D. Update status including version numbers, expiry dates, and most recent update dates and times.

Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.

How are UTM features applied to traffic?

A. One or more UTM features are enabled in a firewall policy.

B. In the system configuration for that UTM feature, you can identify the policies to which the feature is to be applied.

C. Enable the appropriate UTM objects and identify one of them as the default.

D. For each UTM object, identify which policy will use it.

If no firewall policy is specified between two FortiGate interfaces and zones are not used, which of the following statements describes the action taken on traffic flowing between these inter- faces?

A. The traffic is blocked.

B. The traffic is passed.

C. The traffic is passed and logged.

D. The traffic is blocked and logged.

Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

A. The FortiGate unit requires only a single IP address for receiving updates and configuring from a management computer.

B. The FortiGate unit must use public IP addresses on both the internal and external networks.

C. The FortiGate unit commonly uses private IP addresses on the internal network but hides them using rk address translation.

D. The FortiGate unit uses only DHCP-assigned IP addresses on the internal network.

The FortiGate Web Config provides a link to update the firmware in the System > Status win- dow. Clicking this link will perform which of the following actions?

A. It will connect to the Fortinet support site where the appropriate firmware version can be se- lected.

B. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.

C. It will present a prompt to allow browsing to the location of the firmware file.

D. It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit.