Online Access Free FCNSP.v5 Practice Test

In HA, the option Reserve Management Port for Cluster Member is selected as shown in the Exhibit below.

Which of the following statements are correct regarding this setting? (Select all that apply.)

• A.When connecting to port7 you always connect to the master device.
• B.Port7 appears in the routing table.
• C.Interface settings on port7 will not be synchronized with other cluster members.
• D.A gateway address may be configured for port7.
• E.The IP address assigned to this interface must not overlap with the IP address subnet assigned to another interface.

A static route is configured for a FortiGate unit from the CLI using the following commands:
config router static edit 1 set device "wan1" set distance 20 set gateway 192.168.100.1 next end
Which of the following conditions is NOT required for this static default route to be displayed in the FortiGate unit's routing table?

• A.All other default routes should have an equal or higher distance.
• B.The Link Status of the wan1 interface is displayed as Up.
• C.The Administrative Status of the wan1 interface is displayed as Up.
• D.You must disable DHCP client on that interface.

The diag sys session list command is executed in the CLI. The output of this command is shown in the exhibit.

Based on the output from this command, which of the following statements is correct?

• A.This traffic has been authenticated.
• B.This is an ICMP session.
• C.This is a UDP session.
• D.Traffic shaping is being applied to this session.
• E.This session matches a firewall policy with ID 5.

In a High Availability configuration operating in Active-Active mode, which of the following correctly describes the path taken by a load-balanced HTTP session?

• A.Request: Internal Host -> Slave FG -> Master FG -> Internet -> Web Server
• B.Request: Internal Host -> Slave FG -> Internet -> Web Server
• C.Request: Internal Host -> Master FG -> Slave FG -> Internet -> Web Server
• D.Request: Internal Host -> Master FG -> Slave FG -> Master FG -> Internet -> Web Server

Which of the following statements is correct about how the FortiGate unit verifies username and password during user authentication?

• A.The FortiGate unit will only attempt to authenticate against Active Directory if Fortinet Server Authentication Extensions are installed and configured.
• B.An administrator can define a local account for which the password must be verified by querying a remote server.
• C.If a remote server is included in a user group, it will be checked before local accounts.
• D.If authentication fails with a local password, the FortiGate unit will query the authentication server if the local user is configured with both a local password and an authentication server.