Fortinet Certified Network Security Professional (FCNSP.v5) - FCNSP.v5 Exam Practice Test

A. Remote_1 is a Phase 1 object with interface mode enabled

B. The gateway address is not required because the interface is a point-to-point connection

C. Remote_1 is a firewall zone

D. The gateway address is not required because the default route is used

A. Enable the ANY service in the firewall policies for both incoming and outgoing traffic.

B. Create a new session helper for the FTP service monitoring port 2121.

C. Disable any protection profiles being applied to FTP traffic.

D. Place the client and server interface in the same zone and enable intra-zone traffic.

A. OSPF Hello packets are not sent on point-to-point networks.

B. OSPF Hello packets will be sent on all interfaces configured with an address matching the 10.0.1.0/24 and 172.16.0.0/12 networks.

C. OSPF Hello packets will be sent on all interfaces of the FortiGate device.

D. OSPF Hello packets will only be sent on interfaces configured with the IP addresses 172.16.1.1 and 172.16.1.2.

A. Output Template

B. Data Filter Template

C. Schedule Template

D. Layout Template

A. Packet encryption

B. Running SNMP service on a non-standard port is possible

C. SNMP access limits through access lists

D. MIB-based report uploads

A. This FortiGate unit may have multiple Internet connections. To avoid this problem, use the appropriate CLI command to bind the SSL VPN connection to the original incoming interface.

B. Make sure that only Internet Explorer is used. All other browsers are unsupported.

C. Check the SSL adaptor on the host machine. If necessary, uninstall and reinstall the adaptor from the tunnel mode portal.

D. This user does not have permission to enable tunnel mode. Make sure that the tunnel mode widget has been added to that user's web portal.

A. A client with an IP address of 10.10.10.12 is allowed access to the www.yahoo.com/images/ web site and any of its offsite URLs.

B. A client with an IP address of 10.10.10.12 is allowed access to any URL under the www.yahoo.com web site, including any subdirectory URLs, until August 7, 2009.

C. A client with an IP of address 10.10.10.12 is allowed access to any subdirectory that is part of the www.yahoo.com web site.

D. Any client on the same subnet as the authenticated user is allowed to access www.yahoo.com/images/ until August 7, 2009.

E. Any client on the same subnet as the authenticated user is allowed to access www.yahoo.com/images/.

A. Only Exhibit A

B. Only Exhibit C with default UTM Proxy settings.

C. All of the Exhibits (A, B and C)

D. Only Exhibit B

E. Only Exhibit C with non-default UTM Proxy settings (Exhibit B).

A. The attempt will be accepted when there is a matching WAN optimization passive rule.

B. The attempt will be accepted when the request comes from a known peer and there is a matching WAN optimization passive rule.

C. The attempt will be accepted when a user on the remote peer accepts the connection request.

D. The attempt will be accepted when the request comes from a known peer.

A. They can access configuration options for only the VDOMs to which they have been assigned.

B. They can delete the admin account if the default admin user is not logged in.

C. They can delete logged-in users who are also assigned the super_admin access profile.

D. They can view all the system configuration settings but can not make changes.

E. They can make changes to the super_admin profile.