Online Access Free FCNSP.v5 Practice Test

Examine the static route configuration shown below; then answer the question following it.
config router static edit 1 set dst 172.20.1.0 255.255.255.0 set device port1 set gateway 172.11.12.1 set distance 10 set weight 5 next edit 2 set dst 172.20.1.0 255.255.255.0 set blackhole enable set distance 5 set weight 10 next
end
Which of the following statements correctly describes the static routing configuration provided? (Select all that apply.)

• A.Traffic to 172.20.1.0/24 will be shared through both routes.
• B.As long as port1 is up, all the traffic to 172.20.1.0/24 will be routed by the static route number 1. If the interface port1 is down, the traffic will be routed using the blackhole route.
• C.The FortiGate unit will create a session entry in the session table when the traffic is being routed by the blackhole route.
• D.The FortiGate unit will NOT create a session entry in the session table when the traffic is being routed by the blackhole route.
• E.All traffic to 172.20.1.0/24 will always be dropped by the FortiGate unit.

An administrator is configuring a DLP rule for FTP traffic. When adding the rule to a DLP sensor, the administrator notes that the Ban Sender action is not available (greyed-out), as shown in the exhibit.

Which of the following is the best explanation for the Ban Sender action NOT being available?

• A.Firewall policy authentication is required before the Ban Sender action becomes available.
• B.The Ban Sender action is only available for known domains. No domains have yet been added to the domain list.
• C.The Ban Sender action is never available for FTP traffic.
• D.The Ban Sender action needs to be enabled globally for FTP traffic on the FortiGate unit before configuring the sensor.

Review the CLI configuration below for an IPS sensor and identify the correct statements regarding this configuration from the choices below. (Select all that apply.)
config ips sensor edit "LINUX_SERVER" set comment '' set replacemsg-group '' set log enable config entries edit 1 set action default set application all set location server set log enable set log-packet enable set os Linux set protocol all set quarantine none set severity all set status default next end next
end

• A.The sensor will reset all connections that match these signatures.
• B.The sensor will match all traffic from the address object 'LINUX_SERVER'.
• C.The sensor will log all server attacks for all operating systems.
• D.The sensor only filters which IPS signatures to apply to the selected firewall policy.
• E.The sensor will include a PCAP file with a trace of the matching packets in the log message of any matched signature.

An administrator wishes to generate a report showing Top Traffic by service type. They notice that web traffic overwhelms the pie chart and want to exclude the web traffic from the report.
Which of the following statements best describes how to do this?

• A.Add the following entry to the Generic Field section of the Data Filter: service="!web".
• B.In the Service field of the Data Filter, type 80/tcp and select the NOT checkbox.
• C.When editing the chart, uncheck wlog to indicate that Web Filtering data is being excluded when generating the chart.
• D.When editing the chart, enter 'http' in the Exclude Service field.

The following diagnostic output is displayed in the CLI:
diag firewall auth list
policy iD. 9, srC. 192.168.3.168, action: accept, timeout: 13427
user: forticlient_chk_only, group:
flag (80020): auth timeout_ext, flag2 (40): exact group iD. 0, av group: 0
----- 1 listed, 0 filtered -----
Based on this output, which of the following statements is correct?

• A.Firewall policy 9 has endpoint compliance enabled but not firewall authentication.
• B.The client check that is part of an SSL VPN connection attempt failed.
• C.An auth-keepalive value has been enabled.
• D.This user has been associated with a guest profile as evidenced by the group id of 0.