Online Access Free FCNSP Practice Test

Both the FortiGate and FortiAnalyzer units can notify administrators when certain alert conditions are met.
Considering this, which of the following statements is NOT correct?

• A.Both the FortiGate and FortiAnalyzer devices can send alert notifications in the form of an email alert.
• B.Only a FortiAnalyzer device can send the alert notification in the form of a syslog message.
• C.On a FortiAnalyzer device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.
• D.On a FortiGate device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.

An administrator is examining the attack logs and notices the following entry:
type=ips subtype=signature pri=alert vd=root serial=1995 attack_id=103022611 src=69.45.64.22 dst=192.168.1.100 src_port=80 dst_port=4887 src_int=wlan dst_int=internal status=detected proto=6 service=4887/tcp user=N/A group=N/A msg=web_client: IE.IFRAME.BufferOverflow.B
Based on the information displayed in this entry, which of the following statements are correct? (Select all that apply.)

• A.The attack was against a FortiGate unit at the 192.168.1.100 IP address.
• B.The attack was detected and blocked by the FortiGate unit.
• C.This is an HTTP server attack.
• D.The attack was detected and passed by the FortiGate unit.

Identify the correct properties of a partial mesh VPN deployment:

• A.VPN tunnels interconnect between every single location.
• B.VPN tunnels are not configured between every single location.
• C.Some locations are reached via a hub location.
• D.There are no hub locations in a partial mesh.

Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.
config router static edit 1 set dst 172.20.168.0 255.255.255.0 set distance 20 set priority 10 set device port1 next edit 2 set dst 172.20.168.0 255.255.255.0 set distance 20 set priority 20 set device port2 next end
Which of the following statements correctly describes the static routing configuration provided above?

• A.The FortiGate unit will send all the traffic to 172.20.168.0/24 through port1.
• B.Only the route that is using port1 will show up in the routing table.
• C.The FortiGate unit will evenly share the traffic to 172.20.168.0/24 through both routes.
• D.The FortiGate unit will share the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic.

Examine the exhibit shown below then answer the question that follows it.

Within the UTM Proxy Options, the CA certificate Fortinet_CA_SSLProxy defines which of the following:

• A.FortiGate unit's signing certificate used by the SSL proxy.
• B.FortiGuard's encryption certificate used by the SSL proxy.
• C.FortiGate unit's encryption certificate used by the SSL proxy.
• D.FortiGuard's signing certificate used by the SSL proxy.