Online Access Free FCNSP.v5 Practice Test

What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply.)

• A.Using a hub and spoke topology provides stronger encryption.
• B.The routing at a spoke is simpler, compared to a meshed node.
• C.Using a hub and spoke topology is required to achieve full redundancy.
• D.Using a hub and spoke topology simplifies configuration because fewer tunnels are required.

What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply.)

• A.Using a hub and spoke topology simplifies configuration.
• B.Using a hub and spoke topology provides stronger encryption.
• C.Using a hub and spoke topology is required to achieve full redundancy.
• D.Using a hub and spoke topology reduces the number of tunnels.

If Open Shortest Path First (OSPF) has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through OSPF need to be announced by Border Gateway Protocol (BGP)?

• A.The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Autonomous System Boundary Router (ASBR).
• B.The BGP local AS number must be the same as the OSPF area number of the routes learned that need to be redistributed into BGP.
• C.By design, BGP cannot redistribute routes learned through OSPF.
• D.The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Area Border Router (ABR).
• E.At a minimum, the network administrator needs to enable Redistribute OSPF in the BGP settings.

Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.
config router static edit 1 set dst 172.20.168.0 255.255.255.0 set distance 20 set priority 10 set device port1 next edit 2 set dst 172.20.168.0 255.255.255.0 set distance 20 set priority 20 set device port2 next end
Which of the following statements correctly describes the static routing configuration provided above?

• A.The FortiGate unit will send all the traffic to 172.20.168.0/24 through port1.
• B.Only the route that is using port1 will show up in the routing table.
• C.The FortiGate unit will share the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic.
• D.The FortiGate unit will evenly share the traffic to 172.20.168.0/24 through both routes.

The transfer of encrypted files or the use of encrypted protocols between users and servers on the internet can frustrate the efforts of administrators attempting to monitor traffic passing through the FortiGate unit and ensuring user compliance to corporate rules.
Which of the following items will allow the administrator to control the transfer of encrypted data through the FortiGate unit? (Select all that apply.)

• A.Application control can be used to monitor the use of encrypted protocols; alerts can be sent to the administrator through email when the use of encrypted protocols is attempted.
• B.DLP rules can be used to block the transmission of encrypted files.
• C.Encrypted protocols can be scanned through the use of the SSL proxy.
• D.Firewall authentication can be enabled in the firewall policy, preventing the use of encrypted communications channels.