最新的Fortinet Certification認證 FCNSA考試題庫

問題1

If a FortiGate unit has a dmz interface IP address of 210.192.168.2 with a subnet mask of 255.255.255.0, what is a valid dmz DHCP addressing range?

A. 172.168.0.1 - 172.168.0.10

B. 210.192.168.1 - 210.192.168.4

C. All of the above.

D. 210.192.168.3 - 210.192.168.10

正確答案: D

問題2

How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

A. The FortiGate adds a route based upon the destination address in the SSL VPN firewall policy.

B. A route back to the client is automatically created on the FortiGate to match the SSLVPN IP pool from which the IP address assignment was made.

C. Assignment of an IP address causes a host route to be added to the FortiGate routing table.

D. A static route must be configured by the administrator using the ssl.root interface as the outgoing interface.

正確答案: D

問題3

Which statement is correct regarding virus scanning on a FortiGate unit?

A. Fortinet Customer Support enables virus scanning remotely for you.

B. Virus scanning must be enabled in a protection profile and the protection profile must be assigned to a firewall policy.

C. Virus scanning is enabled by default.

D. Enabling virus scanning in a protection profile enables virus scanning for all traffic flowing through the FortiGate.

正確答案: B

問題4

An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet.
What must the user have for a successful authentication? (Select all that apply.)

A. Membership in a firewall user group.

B. A valid username and password.

C. A digital certificate issued by the FortiGate unit.

D. An entry in a supported LDAP Directory.

E. A digital certificate issued by any CA server.

正確答案: A,E

問題5

Which of the following authentication types are supported by FortiGate units? (Select all that apply.)

A. RADIUS

B. Kerberos

C. LDAP

D. Local Users

正確答案: A,C,D

問題6

A FortiGate unit can scan for viruses on which types of network traffic? (Select all that apply.)

A. SNMP

B. FTP

C. SMTP

D. NetBios

E. POP3

正確答案: B,C,E

問題7

Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

A. Local

B. FortiAnalyzer

C. LDAP

D. Syslog

正確答案: A,B,D

最新的Fortinet fortinet certified network security administrator - FCNSA免費考試真題

最新更新

站內鏈接

聯系我們