Fortinet FCNSA.v5 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| System and Network Operations | - FortiGate administration and management - Monitoring and logging |
| VPN and Secure Connectivity | - SSL VPN - IPsec VPN |
| FortiGate Security Features | - Firewall policies and NAT - Security profiles (AV, IPS, Web filtering) |
| Network Security Fundamentals | - Security principles and threat landscape - Basic networking concepts |
Fortinet Certified Network Security Administrator (FCNSA.v5) Sample Questions:
Question #1
Examine the firewall configuration shown below; then answer the question following it.
Which of the following statements are correct based on the firewall configuration illustrated in the exhibit? (Select all that apply.)
A. A user can access the Internet using only the protocols that are supported by user authentication.
B. A user cannot access the Internet using any protocols unless the user has passed firewall authentication.
C. A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access any services.
D. A user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP. These require authentication before the user will be allowed access.
Question #2
The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate unit's GUI and also using the CLI. The command used in the CLI to perform this function is ______ .
A. edit policy
B. reorder
C. move
D. set order
Question #3
Under the System Information widget on the dashboard, which of the following actions are available for the system configuration? (Select all that apply.)
A. Restore
B. Revisions
C. Backup
D. Export
Question #4
An end user logs into the SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has not enabled split tunneling and so the end user must access the Internet through the SSL VPN Tunnel.
Which firewall policies are needed to allow the end user to not only access the internal network but also reach the Internet?
A)
B)
C)
D)
A. Exhibit C
B. Exhibit D
C. Exhibit A
D. Exhibit B
Question #5
A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?
A. DNS
B. Man-in-the-middle
C. Flow-based
D. Proxy
Solutions:
| Question #1 Correct Answer: A,B | Question #2 Correct Answer: C | Question #3 Correct Answer: A,B,C | Question #4 Correct Answer: C | Question #5 Correct Answer: C |
1382 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
