FCNSA.V5 Online Practice Questions and Answers

Which of the following antivirus and attack definition update options are supported by FortiGate units? (Select all that apply.)

A. Manual update by downloading the signatures from the support site.

B. Pull updates from the FortiGate device

C. Push updates from the FortiGuard Distribution Network.

D. "update-AV/AS" command from the CLI

The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate unit's GUI and also using the CLI. The command used in the CLI to perform this function is ______ .

A. set order

B. edit policy

C. reorder

D. move

Examine the firewall configuration shown below; then answer the question following it.

Which of the following statements are correct based on the firewall configuration illustrated in the exhibit? (Select all that apply.)

A. A user can access the Internet using only the protocols that are supported by user authentication.

B. A user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP. These require authentication before the user will be allowed access.

C. A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access any services.

D. A user cannot access the Internet using any protocols unless the user has passed firewall authentication.

The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process. Which of the following are valid authentication protocols that can be used when a user authentic- ates to the RADIUS server? (Select all that apply.)

A. MS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2)

B. PAP (Password Authentication Protocol)

C. CHAP (Challenge-Handshake Authentication Protocol)

D. MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1)

E. FAP (FortiGate Authentication Protocol)

By default the Intrusion Protection System (IPS) on a FortiGate unit is set to perform which ac- tion?

A. Block all network attacks.

B. Block the most common network attacks.

C. Allow all traffic.

D. Allow and log all traffic.

Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

A. The FortiGate unit can filter URLs based on patterns using text and regular expressions.

B. The available actions for URL Filtering are Allow and Block.

C. Multiple URL Filter lists can be added to a single Web filter profile.

D. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

Which of the following statements describes the method of creating a policy to block access to an FTP site?

A. Enable Web Filter URL blocking and add the URL of the FTP site to the URL Block list.

B. Create a firewall policy with destination address set to the IP address of the FTP site, the Ser- vice set to FTP, and the Action set to Deny.

C. Create a firewall policy with a protection profile containing the Block FTP option enabled.

D. None of the above.

Which of the following network protocols can be used to access a FortiGate unit as an adminis- trator?

A. HTTPS, HTTP, SSH, TELNET, PING, SNMP

B. FTP, HTTPS, NNTP, TCP, WINS

C. HTTP, NNTP, SMTP, DHCP

D. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS

E. Telnet, UDP, NNTP, SMTP

Which of the following products can be installed on a computer running Windows XP to provide personal firewall protection, antivirus protection, web and mail filtering, spam filtering, and VPN functionality?

A. FortiGate

B. FortiAnalyzer

C. FortiClient

D. FortiManager

E. FortiReporter

Which of the following Fortinet products can receive updates from the FortiGuard Distribution Network? (Select all that apply.)

A. FortiGate

B. FortiClient

C. FortiMail

D. FortiAnalyzer