Fortinet Certification FCNSP.v5인증시험을 어떻게 준비하면 될가 아직도 고민하고 계시죠? 학원에 등록하자니 시간도 없고 돈도 많이 들고 쉽게 엄두가 나지 않는거죠? Pass4Test제품을 구매하신다면 그런 부담을 이제 끝입니다. Pass4Test덤프는 더욱 가까이 여러분들께 다가가기 위하여 그 어느 덤프판매 사이트보다 더욱 저렴한 가격으로 여러분들을 맞이하고 있습니다. Fortinet Certification FCNSP.v5덤프는 Pass4Test제품이 최고랍니다.
NO.1 Which of the following statements are correct regarding Application
Control?
A. Application Control is based on the IPS engine.
B. Application
Control is based on the AV engine.
C. Application Control can be applied to
SSL encrypted traffic.
D. Application Control cannot be applied to SSL
encrypted traffic.
Answer: A,C
NO.2 In a High Availability cluster
operating in Active-Active mode, which of the following correctly
describes
the path taken by the SYN packet of an HTTP session that is offloaded to a
subordinate
unit?
A. Request: Internal Host; Master FortiGate; Slave
FortiGate; Internet; Web Server
B. Request: Internal Host; Master FortiGate;
Slave FortiGate; Master FortiGate; Internet; Web Server
C. Request: Internal
Host; Slave FortiGate; Internet; Web Server
D. Request: Internal Host; Slave
FortiGate; Master FortiGate; Internet; Web Server
Answer: A
NO.3 Which
of the following must be configured on a FortiGate unit to redirect content
requests to
remote web cache servers?
A. WCCP must be enabled on the
interface facing the Web cache.
B. You must enabled explicit Web-proxy on the
incoming interface.
C. WCCP must be enabled as a global setting on the
FortiGate unit.
D. WCCP must be enabled on all interfaces on the FortiGate
unit through which HTTP traffic is
passing.
Answer: A
NO.4 How can
DLP file filters be configured to detect Office 2010 files? (Select all that
apply.)
A. File TypE. Microsoft Office(msoffice)
B. File TypE.
Archive(zip)
C. File TypE. Unknown Filetype(unknown)
D. File NamE.
"*.ppt", "*.doc", "*.xls"
E. File NamE. "*.pptx", "*.docx",
"*.xlsx"
Answer: B,E
NO.5 What advantages are there in using a
hub-and-spoke IPSec VPN configuration instead of a
fully-meshed set of IPSec
tunnels? (Select all that apply.)
A. Using a hub and spoke topology is
required to achieve full redundancy.
B. Using a hub and spoke topology
simplifies configuration because fewer tunnels are required.
C. Using a hub
and spoke topology provides stronger encryption.
D. The routing at a spoke is
simpler, compared to a meshed node.
Answer: B,D
NO.6 For Data Leak
Prevention, which of the following describes the difference between the
block
and quarantine actions?
A. A block action prevents the transaction.
A quarantine action blocks all future transactions,
regardless of the
protocol.
B. A block action prevents the transaction. A quarantine action
archives the data.
C. A block action has a finite duration. A quarantine
action must be removed by an administrator.
D. A block action is used for
known users. A quarantine action is used for unknown users.
Answer:
A
NO.7 Data Leak Prevention archiving gives the ability to store files
and message data onto a
FortiAnalyzer unit for which of the following types
of network traffic? (Select all that apply.)
A. SNMP
B. IPSec
C.
SMTP
D. POP3
E. HTTP
Answer: C,D,E
NO.8 FSSO provides a single
sign on solution to authenticate users transparently to a FortiGate
unit
using credentials stored in Windows Active Directory.
Which of the
following statements are correct regarding FSSO in a Windows domain
environment
when NTLM and Polling Mode are not used? (Select all that
apply.)
A. An FSSO Collector Agent must be installed on every domain
controller.
B. An FSSO Domain Controller Agent must be installed on every
domain controller.
C. The FSSO Domain Controller Agent will regularly update
user logon information on the FortiGate
unit.
D. The FSSO Collector Agent
will retrieve user information from the Domain Controller Agent and
will send
the user logon information to the FortiGate unit.
E. For non-domain
computers, the only way to allow FSSO authentication is to install an FSSO
client.
Answer: B,D
Control?
A. Application Control is based on the IPS engine.
B. Application
Control is based on the AV engine.
C. Application Control can be applied to
SSL encrypted traffic.
D. Application Control cannot be applied to SSL
encrypted traffic.
Answer: A,C
NO.2 In a High Availability cluster
operating in Active-Active mode, which of the following correctly
describes
the path taken by the SYN packet of an HTTP session that is offloaded to a
subordinate
unit?
A. Request: Internal Host; Master FortiGate; Slave
FortiGate; Internet; Web Server
B. Request: Internal Host; Master FortiGate;
Slave FortiGate; Master FortiGate; Internet; Web Server
C. Request: Internal
Host; Slave FortiGate; Internet; Web Server
D. Request: Internal Host; Slave
FortiGate; Master FortiGate; Internet; Web Server
Answer: A
NO.3 Which
of the following must be configured on a FortiGate unit to redirect content
requests to
remote web cache servers?
A. WCCP must be enabled on the
interface facing the Web cache.
B. You must enabled explicit Web-proxy on the
incoming interface.
C. WCCP must be enabled as a global setting on the
FortiGate unit.
D. WCCP must be enabled on all interfaces on the FortiGate
unit through which HTTP traffic is
passing.
Answer: A
NO.4 How can
DLP file filters be configured to detect Office 2010 files? (Select all that
apply.)
A. File TypE. Microsoft Office(msoffice)
B. File TypE.
Archive(zip)
C. File TypE. Unknown Filetype(unknown)
D. File NamE.
"*.ppt", "*.doc", "*.xls"
E. File NamE. "*.pptx", "*.docx",
"*.xlsx"
Answer: B,E
NO.5 What advantages are there in using a
hub-and-spoke IPSec VPN configuration instead of a
fully-meshed set of IPSec
tunnels? (Select all that apply.)
A. Using a hub and spoke topology is
required to achieve full redundancy.
B. Using a hub and spoke topology
simplifies configuration because fewer tunnels are required.
C. Using a hub
and spoke topology provides stronger encryption.
D. The routing at a spoke is
simpler, compared to a meshed node.
Answer: B,D
NO.6 For Data Leak
Prevention, which of the following describes the difference between the
block
and quarantine actions?
A. A block action prevents the transaction.
A quarantine action blocks all future transactions,
regardless of the
protocol.
B. A block action prevents the transaction. A quarantine action
archives the data.
C. A block action has a finite duration. A quarantine
action must be removed by an administrator.
D. A block action is used for
known users. A quarantine action is used for unknown users.
Answer:
A
NO.7 Data Leak Prevention archiving gives the ability to store files
and message data onto a
FortiAnalyzer unit for which of the following types
of network traffic? (Select all that apply.)
A. SNMP
B. IPSec
C.
SMTP
D. POP3
E. HTTP
Answer: C,D,E
NO.8 FSSO provides a single
sign on solution to authenticate users transparently to a FortiGate
unit
using credentials stored in Windows Active Directory.
Which of the
following statements are correct regarding FSSO in a Windows domain
environment
when NTLM and Polling Mode are not used? (Select all that
apply.)
A. An FSSO Collector Agent must be installed on every domain
controller.
B. An FSSO Domain Controller Agent must be installed on every
domain controller.
C. The FSSO Domain Controller Agent will regularly update
user logon information on the FortiGate
unit.
D. The FSSO Collector Agent
will retrieve user information from the Domain Controller Agent and
will send
the user logon information to the FortiGate unit.
E. For non-domain
computers, the only way to allow FSSO authentication is to install an FSSO
client.
Answer: B,D