Fortinet FCNSA.v5 問題集

質問 1：
Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function. How are UTM features applied to traffic?
A. One or more UTM features are enabled in a firewall policy.
B. Enable the appropriate UTM objects and identify one of them as the default.
C. For each UTM object, identify which policy will use it.
D. In the system configuration for that UTM feature, you can identify the policies to which the feature is to be applied.
正解：A

質問 2：
A FortiGate unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received.
Which of the following statements are possible reasons for this? (Select all that apply.)
A. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network and no override push IP is configured.
B. The external facing interface of the FortiGate unit is configured to use DHCP.
C. The FortiGate unit is in Transparent mode which does not support push updates.
D. The FortiGate unit has not been registered.
正解：A,B,D

質問 3：
CORRECT TEXT
The __________CLI command is used on the FortiGate unit to run static commands such as ping or to reset the FortiGate unit to factory defaults.
正解：
execute

質問 4：
Which of the following Regular Expression patterns will make the term "bad language" case insensitive?
A. /bad language/c
B. [bad language]
C. /bad language/i
D. "bad language"
E. i/bad language/
正解：C

質問 5：
Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.
An administrator must assign a set of UTM features to a group of users.
Which of the following is the correct method for doing this?
A. Enable a set of unique UTM features under "Edit User Group".
B. When defining the UTM objects, the administrator must list the user groups which will use the UTM object.
C. The administrator must apply the UTM features directly to a user object.
D. The administrator must enable the UTM features in an identify-based policy applicable to the user group.
正解：D

質問 6：
Which of the following statements regarding Banned Words are correct? (Select all that apply.)
A. When creating a banned word list, an administrator can indicate either specific words or patterns.
B. The FortiGate unit updates banned words on a periodic basis.
C. The FortiGate unit can scan web pages and email messages for instances of banned words.
D. Content is automatically blocked if a single instance of a banned word appears.
E. Banned words can be expressed as simple text, wildcards or regular expressions.
正解：A,C,E

質問 7：
CORRECT TEXT
In addition to AntiVirus services, the FortiGuard Subscription Services provide IPS, Web Filtering, and ___________ services.
正解：
antispam

質問 8：
Which statement is correct regarding virus scanning on a FortiGate unit?
A. Virus scanning must be enabled in a UTM security profile and the UTM security profile must be assigned to a firewall policy.
B. Virus scanning is enabled by default.
C. Enabling virus scanning in a UTM security profile enables virus scanning for all traffic flowing through the FortiGate device.
D. Fortinet Customer Support enables virus scanning remotely for you.
正解：A

質問 9：
What is the FortiGate unit password recovery process?
A. Hold CTRL + break during reboot and reset the admin password.
B. Interupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry.
C. The only way to regain access is to interrupt boot sequence and restore a configuration file for which the password has been modified.
D. Log in through the console port using the maintainer account within several minutes of a reboot.
正解：D