Online Access Free FCNSP Practice Test

What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply.)

• A.Using a hub and spoke topology simplifies configuration because fewer tunnelsare required.
• B.Using a hub and spoke topology is required to achieve full redundancy.
• C.Using a hub and spoke topology provides stronger encryption.
• D.The routing at a spoke is simpler, compared to a meshed node.

The FortiGate Server Authentication Extensions (FSAE) provide a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows Active Directory.
Which of the following statements are correct regarding FSAE in a Windows domain environment when NTLM is not used? (Select all that apply.)

• A.For non-domain computers, an FSAE client must be installed on the computer to allow FSAE authentication.
• B.The FSAE Domain Controller Agent will regularly update user logon information on the FortiGate unit.
• C.An FSAE Collector Agent must be installed on every domain controller.
• D.The FSAE Collector Agent will retrieve user information from the Domain Controller Agent and will send the user logon information to the FortiGate unit.
• E.An FSAE Domain Controller Agent must be installed on every domain controller.

Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the Exhibit.

Which of the following statements is correct regarding this output? (Select one answer).

• A.One tunnel is up
• B.One tunnel is rekeying
• C.Two tunnels are up
• D.Two tunnels are rekeying

The following ban list entry is displayed through the CLI.
get user ban list
id cause src-ip-addr dst-ip-addr expires created
531 protect_client 10.177.0.21 207.1.17.1 indefinite Wed Dec 24 :21:33 2008
Based on this command output, which of the following statements is correct?

• A.This diagnostic entry results from the administrator running the diag ips log test command. This command has no effect on traffic.
• B.The administrator has specified the Attack and Victim Address method for the quarantine.
• C.An attack has been repeated more than once during the holddown period; the expiry time has been reset to indefinite.
• D.A DLP rule has been matched.

A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit.

Which of the following statements are correct regarding these VDOMs? (Select all that apply.)

• A.All VDOMs must operate in the same mode.
• B.The FortiGate unit must be a model 1000 or above to support multiple VDOMs.
• C.A license had to be purchased and applied to the FortiGate unit before VDOM mode could be enabled.
• D.Changing a VDOM operational mode requires a reboot of the FortiGate unit.
• E.The FortiGate unit supports any combination of these VDOMs in NAT/Route and Transparent modes.
• F.An admin account can be assigned to one VDOM or it can have access to all three VDOMs.