Fortinet Certified Network Security Professional (FCNSP v4.2) Sample Questions:
1. The eicar test virus is put into a zip archive, which is given the password of "Fortinet" in order to open the archive. Review the configuration in the exhibits shown below; then answer the question that follows.
Exhibit A - Antivirus Profile:
Exhibit B - Non-default UTM Proxy Options Profile: Exhibit C - DLP Profile:
Which of one the following profiles could be enabled in order to prevent the file from passing through the FortiGate device over HTTP on the standard port for that protocol?
A) Only Exhibit A
B) Only Exhibit C with default UTM Proxy settings.
C) All of the Exhibits (A, B and C)
D) Only Exhibit B
E) Only Exhibit C with non-default UTM Proxy settings (Exhibit B).
2. Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.
config router static edit 1 set dst 172.20.168.0 255.255.255.0 set distance 20 set priority 10 set device port1 next edit 2 set dst 172.20.168.0 255.255.255.0 set distance 20 set priority 20 set device port2 next end
Which of the following statements correctly describes the static routing configuration provided above?
A) The FortiGate unit will send all the traffic to 172.20.168.0/24 through port1.
B) The FortiGate unit will share the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic.
C) The FortiGate unit will evenly share the traffic to 172.20.168.0/24 through both routes.
D) Only the route that is using port1 will show up in the routing table.
3. Which of the following is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying the FortiGate unit?
A) MIB-based report uploads
B) Running SNMP service on a non-standard port is possible
C) Packet encryption
D) SNMP access limits through access lists
4. The following ban list entry is displayed through the CLI.
get user ban list
id cause src-ip-addr dst-ip-addr expires created
531 protect_client 10.177.0.21 207.1.17.1 indefinite Wed Dec 24 :21:33 2008
Based on this command output, which of the following statements is correct?
A) A DLP rule has been matched.
B) The administrator has specified the Attack and Victim Address method for the quarantine.
C) An attack has been repeated more than once during the holddown period; the expiry time has been reset to indefinite.
D) This diagnostic entry results from the administrator running the diag ips log test command. This command has no effect on traffic.
5. What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)
A) Only applies to connections handled by a proxy.
B) Connections must not be handled by a proxy.
C) Only applies to UDP and ICMP connections.
D) Enable session pick-up.
Solutions:
| Question # 1 Answer: B | Question # 2 Answer: A | Question # 3 Answer: C | Question # 4 Answer: B | Question # 5 Answer: B,D |
1098 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
