最新的 Fortinet Certification FCNSA.v5 免費考試真題:

1. You wish to create a firewall policy that applies only to traffic intended for your web server. The server has an IP address of 192.168.2.2 and belongs to a class C subnet. When defining the firewall address for use in this policy, which one of the following addressing formats is correct?

A) 192.168.2.2 / 255.255.255.0
B) 192.168.2.2 / 255.255.255.255
C) 192.168.2.0 / 255.255.255.0
D) 192.168.2.0 / 255.255.255.255

2. Two-factor authentication is supported using the following methods? (Select all that apply.)

A) SMS phone message
B) Code books
C) Email
D) FortiToken

3. An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has enabled split tunneling.

Given that the user authenticates against the SSL VPN policy shown in the image below, which statement below identifies the route that is added to the client's routing table.

A) A route to destination matching the 'WIN2K3' address object.
B) A route to the destination matching the 'all' address object.
C) A default route.
D) No route is added.

4. Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function. How are UTM features applied to traffic?

A) For each UTM object, identify which policy will use it.
B) Enable the appropriate UTM objects and identify one of them as the default.
C) In the system configuration for that UTM feature, you can identify the policies to which the feature is to be applied.
D) One or more UTM features are enabled in a firewall policy.

5. The command structure of the CLI on a FortiGate unit consists of commands, objects, branches, tables and parameters. Which of the following items describes port1?

A) An object.
B) A table.
C) A command.
D) A parameter.

問題與答案：