Dumps › Fortinet › ▀▄▀▄ FCNSP ▀▄▀▄

• Dumps PDF's (1)
• Questions (74)
• Results (1)
• Alerts

1. Which of the following describes the difference between the ban and quarantine actions?

a.A ban action prevents future transactions using the same protocol which triggered the ban. A qarantine action blocks all future transactions, regardless of the protocol.
b.A ban action blocks the transaction. A quarantine action archives the data.
c.A ban action has a finite duration. A quarantine action must be removed by an administrator,
d.A ban action is used for known users. A quarantine action is used for unknown users.

Answer :A

Explanation :

2. Which of the following is an advantage of using SNMP v3 Instead of SNMP v1/v2 when querying the FortiGate unit?

a.Packet encryption
b.MIB-based report uploads
c.SNMP access limits through access lists
d.Running SNMP service on a non-standard port is possible

Show the answer with explanation

3. An administrator has formed a High Availability cluster involving two FortiGate 310B units. [ Multiple ipstream Layer 2 switches] - [ FortiGate HA Cluster ] - [ Multiple downstream Layer 2 switches ] The administrator wishes to ensure that a single link failure will have minimal impact upon the overall throughput of traffic through this duster. Which of the following options describes the best step the administrator can take? The administrator should...

a.setup a full-mesh design which uses redundant interfaces.
b.increase the number of FortiGate units in the cluster and configure HA in Active-Active mode.
c.enables monitoring of all active interfaces.
d.configure the HA ping server feature to allow for HA failover in the event that a path is disrupted.

Show the answer with explanation

4. A DLP rule with an action of Exempt has been matched against traffic passing through the FortiGate unit. Which of the following statements is correct regarding how this transaction will be handled by the FortiGate unit?

a.Any other matched EXP rules will be ignored with the exception of Archiving.
b.Future files whose characteristics match this file will bypass DLP scanning.
c.The traffic matching the DLP rule will bypass antivirus scanning.
d.The client IP address will be added to a white list.

Show the answer with explanation

5. Which of the following statements are correct regarding the configuration of a FortiGate unit as an SSL VPN gateway?(Select all that apply.)

a.Tunnel mode can only be used if the SSL VPN user groups have at least one Host Check option enabled.
b.The specific routes needed to access internal resources through an SSL VPN connection in tunnel mode from the client computer are defined in the routing widget associated with the SSL VPN portal.
c.In order to apply a portal to a user, that user must belong to an SSL VPN user group.
d.The portal settings specify whether the connection will operate in web-only or tunnel mode.

Show the answer with explanation