最新的 Fortinet Certification FCNSP 免費考試真題:

1. Examine the static route configuration shown below; then answer the question following it.
config router static edit 1 set dst 172.20.1.0 255.255.255.0 set device port1 set gateway 172.11.12.1 set distance 10 set weight 5 next edit 2 set dst 172.20.1.0 255.255.255.0 set blackhole enable set distance 5 set weight 10 next
end
Which of the following statements correctly describes the static routing configuration provided? (Select all that apply.)

A) Traffic to 172.20.1.0/24 will be shared through both routes.
B) All traffic to 172.20.1.0/24 will always be dropped by the FortiGate unit.
C) The FortiGate unit will NOT create a session entry in the session table when the traffic is being routed by the blackhole route.
D) As long as port1 is up, all the traffic to 172.20.1.0/24 will be routed by the static route number 1. If the interface port1 is down, the traffic will be routed using the blackhole route.
E) The FortiGate unit will create a session entry in the session table when the traffic is being routed by the blackhole route.

2. Which of the following describes the difference between the ban and quarantine actions?

A) A ban action prevents future transactions using the same protocol which triggered the ban. A qarantine action blocks all future transactions, regardless of the protocol.
B) A ban action has a finite duration. A quarantine action must be removed by an administrator.
C) A ban action blocks the transaction. A quarantine action archives the data.
D) A ban action is used for known users. A quarantine action is used for unknown users.

3. What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)

A) Only applies to UDP and ICMP connections.
B) Connections must not be handled by a proxy.
C) Only applies to connections handled by a proxy.
D) Enable session pick-up.

4. If Open Shortest Path First (OSPF) has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through OSPF need to be announced by Border Gateway Protocol (BGP)?

A) The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Autonomous System Boundary Router (ASBR).
B) At a minimum, the network administrator needs to enable Redistribute OSPF in the BGP settings.
C) The BGP local AS number must be the same as the OSPF area number of the routes learned that need to be redistributed into BGP.
D) By design, BGP cannot redistribute routes learned through OSPF.
E) The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Area Border Router (ABR).

5. An administrator has formed a High Availability cluster involving two FortiGate 310B units.
[Multiple upstream Layer 2 switches] -- [ FortiGate HA Cluster ] -- [ Multiple downstream Layer 2 switches ]
The administrator wishes to ensure that a single link failure will have minimal impact upon the overall throughput of traffic through this cluster.
Which of the following options describes the best step the administrator can take?
The administrator should...

A) enable monitoring of all active interfaces.
B) set up a full-mesh design which uses redundant interfaces.
C) increase the number of FortiGate units in the cluster and configure HA in Active-Active mode.
D) configure the HA ping server feature to allow for HA failover in the event that a path is disrupted.

問題與答案：