Fortinet Certified Network Security Professional (FCNSP.v5)

Question 1

What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply.)

A. Using a hub and spoke topology simplifies configuration.

B. Using a hub and spoke topology provides stronger encryption.

C. Using a hub and spoke topology is required to achieve full redundancy.

D. Using a hub and spoke topology reduces the number of tunnels.

Correct Answer: A,D

Question 2

The diag sys session list command is executed in the CLI. The output of this command is shown in the exhibit.

Based on the output from this command, which of the following statements is correct?

A. This session matches a firewall policy with ID 5.

B. This is a UDP session.

C. Traffic shaping is being applied to this session.

D. This traffic has been authenticated.

E. This is an ICMP session.

Correct Answer: C

Question 3

Review the CLI configuration below for an IPS sensor and identify the correct statements regarding this configuration from the choices below. (Select all that apply.)
config ips sensor edit "LINUX_SERVER" set comment '' set replacemsg-group '' set log enable config entries edit 1 set action default set application all set location server set log enable set log-packet enable set os Linux set protocol all set quarantine none set severity all set status default next end next
end

A. The sensor will include a PCAP file with a trace of the matching packets in the log message of any matched signature.

B. The sensor will log all server attacks for all operating systems.

C. The sensor only filters which IPS signatures to apply to the selected firewall policy.

D. The sensor will match all traffic from the address object 'LINUX_SERVER'.

E. The sensor will reset all connections that match these signatures.

Correct Answer: A,C

Question 4

In Transparent Mode, forward-domain is an attribute of ______________.

A. a static route

B. an interface

C. a virtual domain

D. a firewall policy

Correct Answer: B

Question 5

A network administrator connects his PC to the INTERNAL interface on a FortiGate unit. The administrator attempts to make an HTTPS connection to the FortiGate unit on the VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity.
The following troubleshooting commands are executed from the DOS prompt on the PC and from
the CLI.
C:\>ping 10.0.1.1
Pinging 10.0.1.1 with 32 bytes of data:
Reply from 10.0.1.1: bytes=32 time=1ms TTL=255
Reply from 10.0.1.1: bytes=32 time<1ms TTL=255
Reply from 10.0.1.1: bytes=32 time<1ms TTL=255
Reply from 10.0.1.1: bytes=32 time<1ms TTL=255
user1 # get system interface
== [ internal ]
namE. internal modE. static ip: 10.0.1.254 255.255.255.128 status: up
netbios-forwarD. disable typE. physical mtu-overridE. disable
== [ vlan1 ]
namE. vlan1 modE. static ip: 10.0.1.1 255.255.255.128 status: up netb
ios-forwarD. disable typE. vlan mtu-overridE. disable
user1 # diagnose debug flow trace start 100
user1 # diagnose debug ena
user1 # diagnose debug flow filter daddr 10.0.1.1 10.0.1.1
id=20085 trace_id=274 msg="vd-root received a packet(proto=6, 10.0.1.130:47927->10.0.1.1:443)
from internal."
id=20085 trace_id=274 msg="allocate a new session-00000b1b"
id=20085 trace_id=274 msg="find SNAT: IP-10.0.1.1, port-43798"
id=20085 trace_id=274 msg="iprope_in_check() check failed, drop"
Based on the output from these commands, which of the following explanations is a possible cause of the problem?

A. The Fortigate unit has no route back to the PC.

B. The FortiGate unit does not have the HTTPS service configured on the VLAN1 interface.

C. The PC is using an incorrect default gateway IP address.

D. The PC has an IP address in the wrong subnet.

E. There is no firewall policy allowing traffic from INTERNAL-> VLAN1.

Correct Answer: B

Question 6

For Data Leak Prevention, which of the following describes the difference between the block and quarantine actions?

A. A block action is used for known users. A quarantine action is used for unknown users.

B. A block action has a finite duration. A quarantine action must be removed by an administrator.

C. A block action prevents the transaction. A quarantine action blocks all future transactions, regardless of the protocol.

D. A block action prevents the transaction. A quarantine action archives the data.

Correct Answer: C

Question 7

In order to load-share traffic using multiple static routes, the routes must be configured with ...

A. the same distance but each of them must be assigned a unique priority.

B. the same distance and the same weight.

C. the same distance and same priority.

D. a distance equal to its desired weight for ECMP but all must have the same priority.

Correct Answer: C

Question 8

Which of the following statements is correct about configuring web filtering overrides?

A. Using Web Filtering Overrides requires the use of Firewall Policy Authentication.

B. The Override Scopes of User and User Group are only for use when Firewall Policy Authentication is also being used.

C. Admin overrides require an administrator to manually allow pending override requests which are listed in the Override Monitor.

D. The Override option for FortiGuard Web Filtering is available for any user group type.

Correct Answer: B

Question 9

You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You have chosen to use Interface Mode when configuring the VPN tunnel and you want users from either side to be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate unit already has a default route.
Which of the following configuration steps are required to achieve these objectives? (Select all that apply.)

A. Create one firewall policy.

B. Create a phase 2 definition.

C. Create two firewall policies.

D. Add a route for the remote subnet.

E. Create a phase 1 definition.

F. Add a route for incoming traffic.

Correct Answer: B,C,D,E

Question 10

When the SSL proxy inspects the server certificate for Web Filtering only in SSL Handshake mode, which certificate field is being used to determine the site rating?

A. Validity

B. Organizational Unit

C. Organization

D. Serial Number

E. Common Name

Correct Answer: E

Fortinet Certified Network Security Professional (FCNSP.v5) - FCNSP.v5 Exam Practice Test

Latest Update

Useful Links

Contact Us