最新的Fortinet Certification認證 FCNSA.v5考試題庫

問題1

A FortiGate unit can provide which of the following capabilities? (Select all that apply.)

A. Mail server

B. Mail relay

C. Firewall

D. VPN gateway

E. Email filtering

正確答案: C,D,E

問題2

A FortiAnalyzer device could use which security method to secure the transfer of log data from FortiGate devices?

A. S/MIME

B. direct serial connection

C. SSL

D. IPSec

正確答案: D

問題3

Which of the following items represent the minimum configuration steps an administrator must perform to enable Data Leak Prevention for traffic flowing through the FortiGate unit? (Select all that apply.)

A. Assign a DLP sensor in a firewall policy.

B. Enable DLP globally using the config sys dlp command in the CLI.

C. Define one or more DLP rules.

D. Define a DLP sensor.

E. Apply one or more DLP rules to a firewall policy.

F. Apply a DLP sensor to a DoS sensor policy.

正確答案: A,C,D

問題4

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides are correct?
(Select all that apply.)

A. Authentication to allow the override is based on a user's membership in a user group.

B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.

C. A protection profile may have only one user group defined as an override group.

D. Overrides can be allowed by the administrator for a specific period of time.

正確答案: A,B,D

問題5

Which of the following regular expression patterns will make the terms "confidential data" case insensitive?

A. i/confidential data/

B. /confidential data/c

C. "confidential data"

D. /confidential data/i

E. \[confidential data]

正確答案: D

問題6

The Idle Timeout setting on a FortiGate unit applies to which of the following?

A. Web browsing

B. Web filtering overrides.

C. Administrator access

D. FTP connections

E. User authentication

正確答案: C

問題7

Which of the following items is NOT a packet characteristic matched by a firewall service object?

A. TCP/UDP source and destination ports

B. IP protocol number

C. TCP sequence number

D. ICMP type and code

正確答案: C

問題8

Which of the following products is designed to manage multiple FortiGate devices?

A. FortiGate device

B. FortiClient device

C. FortiManager device

D. FortiMail device

E. FortiAnalyzer device

F. FortiBridge device

正確答案: C

問題9

When firewall policy authentication is enabled, only traffic on supported protocols will trigger an authentication challenge.
Select all supported protocols from the following:

A. HTTP

B. SSH

C. FTP

D. SCP

E. SMTP

正確答案: A,C

問題10

Which of the statements below are true regarding firewall policy disclaimers? (Select all that apply.)

A. The disclaimer page is customizable.

B. The disclaimer can only be applied to wireless interfaces.

C. User must accept the disclaimer to proceed with the authentication process.

D. The disclaimer cannot be used in combination with user authentication.

正確答案: A,C

最新的Fortinet Certified Network Security Administrator (FCNSA.v5) - FCNSA.v5免費考試真題

最新更新

站內鏈接

聯系我們