fortinet certified network security administrator (FCNSA) Free Practice Test

Question 1

In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel between two separate private networks.
Which of the following configuration steps must be performed on both FortiGate units to support this configuration? (Select all that apply.)

A. Create firewall policies to control traffic between the IP source and destination address.

B. Configure the appropriate user groups on the Fortigate units to allow users access to the IPSec VPN connection.

C. Define the Phase 2 parameters that the FortiGate unit needs to create a VPN tunnel with the remote peer.

D. Set the operating mode of the FortiGate unit to IPSec VPN mode.

E. Define the Phase 1 parameters that the FortiGate unit needs to authenticate the remote peers.

Correct Answer: A,C,E

Question 2

Which of the following statements correctly describes how a FortiGate unit functions in Transparent mode?

A. The FortiGate unit uses private IP addresses on the internal network but hides them using address translation.

B. An IP address is used to manage the FortiGate unit but this IP address is not associated with a specific interface.

C. To manage the FortiGate unit, one of the interfaces must be designated as the management interface. This interface may not be used for forwarding data.

D. The FortiGate unit must use public IP addresses on the internal and external networks.

Correct Answer: B

Question 3

How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

A. A static route must be configured by the administrator using the ssl.root interface as the outgoing interface.

B. A route back to the client is automatically created on the FortiGate to match the SSLVPN IP pool from which the IP address assignment was made.

C. Assignment of an IP address causes a host route to be added to the FortiGate routing table.

D. The FortiGate adds a route based upon the destination address in the SSL VPN firewall policy.

Correct Answer: A

Question 4

Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

A. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

B. Multiple URL Filter lists can be added to a single Web filter profile.

C. The available actions for URL Filtering are Allow, Block and Exempt.

D. The available actions for URL Filtering are Allow and Block.

Correct Answer: C

Question 5

Alert emails enable the FortiGate unit to send email notifications to an email address upon detection of a pre-defined event type.
Which of the following are some of the available event types in Web Config? (Select all that apply.)

A. Intrusion detected.

B. Oversized file detected.

C. FortiGuard Web Filtering rating error detected.

D. DHCP address assigned.

E. Successful firewall authentication.

Correct Answer: A

Question 6

A FortiGate unit can create a secure connection to a client using SSL VPN in tunnel mode.
Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.)

A. Software must be downloaded to the web client to be able to use a tunnel mode SSL VPN.

B. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.

C. Split tunneling can be enabled when using tunnel mode SSL VPN.

D. Tunnel mode SSL VPN requires the FortiClient software to be installed on the user's computer.

E. Users attempting to create a tunnel mode SSL VPN connection must be members of a configured user group on the FortiGate unit.

Correct Answer: A,B,C,E

Question 7

UTM features can be applied to which of the following items?

A. Policy routes

B. User groups

C. Address groups

D. Firewall policies

Correct Answer: D

Question 8

Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

A. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

B. The FortiGate unit can filter URLs based on patterns using text and regular expressions.

C. Multiple URL Filter lists can be added to a single Web filter profile.

D. The available actions for URL Filtering are Allow and Block.

Correct Answer: B

Welcome to TestSimulate

Fortinet fortinet certified network security administrator (FCNSA) Free Practice Test