Online Access Free FCNSA.v5 Practice Test

The command structure of the CLI on a FortiGate unit consists of commands, objects, branches, tables and parameters. Which of the following items describes port1?

• A.An object.
• B.A parameter.
• C.A command.
• D.A table.

In order to match an identity-based policy, the FortiGate unit checks the IP information. Once inside the policy, the following logic is followed:

• A.First, the user is checked to determine if they belong to any of the groups defined for that policy. Next, user restrictions are determined and port, time, and UTM profiles are applied. Finally, a check is performed to determine if the user's login credentials are valid.
• B.First, a check is performed to determine if the user's login credentials are valid. Next, the user is checked to determine if they belong to any of the groups defined for that policy. Finally, user restrictions are determined and port, time, and UTM profiles are applied.
• C.First, user restrictions are determined and port, time, and UTM profiles are applied. Next, a check is performed to determine if the user's login credentials are valid. Finally, the user is checked to determine if they belong to any of the groups defined for that policy.

Which of the following antivirus and attack definition update features are supported by FortiGate units? (Select all that apply.)

• A.Manual, user-initiated updates from the FortiGuard Distribution Network.
• B.Push updates from the FortiGuard Distribution Network.
• C.Update status including version numbers, expiry dates, and most recent update dates and times.
• D.Hourly, daily, or weekly scheduled antivirus and attack definition and antivirus engine updates from the FortiGuard Distribution Network.

SSL content inspection is enabled on the FortiGate unit. Which of the following steps is required to prevent a user from being presented with a web browser warning when accessing an SSL-encrypted website?

• A.The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the user's workstation.
• B.Disable the strict server certificate check in the web browser under Internet Options.
• C.Enable transparent proxy mode on the FortiGate unit.
• D.Enable NTLM authentication on the FortiGate unit. NTLM authentication suppresses the certificate warning messages in the web browser.

Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)

• A.An actual IP address or an IP address group.
• B.An IP address pool.
• C.A virtual IP address.
• D.An FQDN or Geographic value(s).