Online Access Free FCNSA.v5 Practice Test

FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed.
What action must be taken for one of these profiles to become active?

• A.The protection profile must be assigned to a firewall policy.
• B.The "Use Protection Profile" option must be selected in the Web Config tool under the sections for AntiVirus, IPS, WebFilter, and AntiSpam.
• C.The protection profile must be set as the Active Protection Profile.
• D.All of the above.

Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.)

• A.Iterative
• B.Conditional-forward
• C.Recursive
• D.Forward-only
• E.Non-recursive

You wish to create a firewall policy that applies only to traffic intended for your web server. The server has an IP address of 192.168.2.2 and belongs to a class C subnet. When defining the firewall address for use in this policy, which one of the following addressing formats is correct?

• A.192.168.2.0 / 255.255.255.255
• B.192.168.2.2 / 255.255.255.0
• C.192.168.2.2 / 255.255.255.255
• D.192.168.2.0 / 255.255.255.0

Which of the following is true regarding Switch Port Mode?

• A.Provides separate routable interfaces for each internal port.
• B.Configures ports to be part of the same broadcast domain.
• C.An administrator can select ports to be used as a switch.
• D.Allows all internal ports to share the same subnet.

What is the effect of using CLI "config system session-ttl" to set session_ttl to 1800 seconds?

• A.The maximum length of time a session can be open is 1800 seconds.
• B.Sessions can be idle for no more than 1800 seconds.
• C.After a session has been open for 1800 seconds, the FortiGate unit will send a keepalive packet to both client and server.
• D.After 1800 seconds, the end user must reauthenticate.