FCNSA by Fortinet Valid Free Exam Practice Test

Question 1

What is the FortiGate unit password recovery process?

A. Interupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry. B. Hold CTRL + break during reboot and reset the admin password. C. Log in through the console port using the maintainer account within several minutes of a reboot. D. The only way to regain access is to interrupt boot sequence and restore a configuration file for which the password has been modified.

Correct Answer: C

Question 2

Caching improves performance by reducing FortiGate unit requests to the FortiGuard server.
Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.)

A. The size of the cache will increase to accomodate any number of cached queries. B. When the cache is full, the least recently used IP address or URL is deleted from the cache. C. Caching is available for web filtering, antispam, and IPS requests. D. An administrator can configure the number of seconds to store information in the cache before the FortiGate unit contacts the FortiGuard server again. E. The cache uses a small portion of the FortiGate system memory.

Correct Answer: B,D,E

Question 3

Which of the following methods can be used to access the CLI? (Select all that apply.)

A. By using the CLI console window in Web Config. B. By using an SSH connection. C. By using a Telnet connection. D. By using a direct connection to a serial console.

Correct Answer: A,B,C,D

Question 4

Which of the following statements correctly describes how a push update from the FortiGuard Distribution Network (FDN) works?

A. The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update. B. The FDN sends push updates only once. C. The FDN continues to send push updates until the FortiGate unit sends an acknowledgement. D. The FDN sends package updates automatically to the FortiGate unit without requiring an update request.

Correct Answer: A

Question 5

Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

A. The FortiGate unit can filter URLs based on patterns using text and regular expressions. B. A FortiGuard Web Filtering Override match will override a block action in the URL filter list. C. Multiple URL Filter lists can be added to a single Web filter profile. D. The available actions for URL Filtering are Allow and Block.

Correct Answer: A

Question 6

The FortiGate Web Config provides a link to update the firmware in the System > Status window.
Clicking this link will perform which of the following actions?

A. It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit. B. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit. C. It will present a prompt to allow browsing to the location of the firmware file. D. It will connect to the Fortinet support site where the appropriate firmware version can be selected.

Correct Answer: C

Question 7

An end user logs into the SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has not enabled split tunneling and so the end user must access the Internet through the SSL VPN Tunnel.
Which firewall policies are needed to allow the end user to not only access the internal network but also reach the Internet?
A)

B)

C)

D)

A. Exhibit B B. Exhibit A C. Exhibit C D. Exhibit D

Correct Answer: B

Question 8

UTM features can be applied to which of the following items?

A. User groups B. Policy routes C. Address groups D. Firewall policies

Correct Answer: D

Fortinet fortinet certified network security administrator - FCNSA Exam Practice Test