FCNSA.V5 Online Practice Questions and Answers

Which statement is correct regarding virus scanning on a FortiGate unit?

A. Virus scanning is enabled by default.

B. Fortinet Customer Support enables virus scanning remotely for you.

C. Virus scanning must be enabled in a UTM security profile and the UTM security profile must be assigned to a firewall policy.

D. Enabling virus scanning in a UTM security profile enables virus scanning for all traffic flowing through the FortiGate device.

Which of the following statements are correct regarding URL filtering on the FortiGate unit? (Select all that apply.)

A. The allowed actions for URL Filtering include Allow, Block and Exempt.

B. The allowed actions for URL Filtering are Allow and Block.

C. The FortiGate unit can filter URLs based on patterns using text and regular expressions.

D. Any URL accessible by a web browser can be blocked using URL Filtering.

E. Multiple URL Filter lists can be added to a single protection profile.

Encrypted backup files provide which of the following benefits? (Select all that apply.)

A. Integrity of the backup file is protected since it cannot be easily modified when encrypted.

B. Prevents the backup file from becoming corrupted.

C. Protects details of the device's configuration settings from being discovered while the backup file is in transit. For example, transferred to a data centers for system recovery.

D. A copy of the encrypted backup file is automatically pushed to the FortiGuard Distribution Service (FDS) for disaster recovery purposes. If the backup file becomes corrupt it can be retrieved through FDS.

E. Fortinet Technical Support can recover forgotten passwords with a backdoor passphrase.

A firewall policy has been configured such that traffic logging is disabled and a UTM function is enabled.

In addition, the system setting `utm-incident-traffic-log' has been enabled. In which log will a UTM event message be stored?

A. Traffic

B. UTM

C. System

D. None

Which of the following are valid components of the Fortinet Server Authentication Extensions (FSAE)? t all that apply.)

A. Domain Local Security Agent.

B. Collector Agent.

C. Active Directory Agent.

D. User Authentication Agent.

E. Domain Controller Agent.

A FortiGate unit can create a secure connection to a client using SSL VPN in tunnel mode.

Which of the owing statements are correct regarding the use of tunnel mode SSL VPN? (Se- lect all that apply.)

A. Split tunneling can be enabled when using tunnel mode SSL VPN.

B. Software must be downloaded to the web client to be able to use a tunnel mode SSL VPN.

C. Users attempting to create a tunnel mode SSL VPN connection must be members of a con- figured user group on the FortiGate unit.

D. Tunnel mode SSL VPN requires the FortiClient software to be installed on the user's com- puter.

E. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.

By default the Intrusion Protection System (IPS) on a FortiGate unit is set to perform which ac- tion?

A. Block all network attacks.

B. Block the most common network attacks.

C. Allow all traffic.

D. Allow and log all traffic.

Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

A. The FortiGate unit can filter URLs based on patterns using text and regular expressions.

B. The available actions for URL Filtering are Allow and Block.

C. Multiple URL Filter lists can be added to a single Web filter profile.

D. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed.

What action must be taken for one of these profiles to become active?

A. The protection profile must be assigned to a firewall policy.

B. The "Use Protection Profile" option must be selected in the Web Config tool under the sec- tions for AntiVirus, IPS, WebFilter, and AntiSpam.

C. The protection profile must be set as the Active Protection Profile.

D. All of the above.

Which of the following components are contained in all FortiGate units from the FG50 models and up? (Select all that apply.)

A. FortiASIC content processor.

B. Hard Drive.

C. Gigabit network interfaces.

D. Serial console port.