Fortinet FCNSP.v5 問題集

質問 1：
Which of the following statements best decribes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?
A. The proxy removes the infected file from the server by sending a delete command on behalf of the client.
B. The proxy sends the file to the server while simultaneously buffering it.
C. The proxy buffers the entire file from the client, only sending the file to the server if the file is clean. One possible consequence of buffering is that the server could time out.
D. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.
正解：C

質問 2：
Review the CLI configuration below for an IPS sensor and identify the correct statements regarding this configuration from the choices below. (Select all that apply.)
config ips sensor edit "LINUX_SERVER" set comment '' set replacemsg-group '' set log enable config entries edit 1 set action default set application all set location server set log enable set log-packet enable set os Linux set protocol all set quarantine none set severity all set status default next end next
end
A. The sensor will log all server attacks for all operating systems.
B. The sensor will include a PCAP file with a trace of the matching packets in the log message of any matched signature.
C. The sensor only filters which IPS signatures to apply to the selected firewall policy.
D. The sensor will reset all connections that match these signatures.
E. The sensor will match all traffic from the address object 'LINUX_SERVER'.
正解：B,C

質問 3：
When viewing the Banned User monitor in Web Config, the administrator notes the entry illustrated in the exhibit.

Which of the following statements is correct regarding this entry?
A. The entry displays a ban that has been added as a result of traffic triggering a configured DLP rule.
B. The entry displays a ban that was triggered by HTTP traffic matching an IPS signature. This client is banned from receiving or sending any traffic through the FortiGate.
C. The entry displays a quarantine, which could have been added by either IPS or DLP.
D. This entry displays a ban entry that was added manually by the administrator on June11th.
正解：A

質問 4：
What is the effect of using CLI "config system session-ttl" to set session_ttl to 1800 seconds?
A. Sessions can be idle for no more than 1800 seconds.
B. After 1800 seconds, the end user must reauthenticate.
C. After a session has been open for 1800 seconds, the FortiGate unit will send a keepalive packet to both client and server.
D. The maximum length of time a session can be open is 1800 seconds.
正解：A

質問 5：
The diag sys session list command is executed in the CLI. The output of this command is shown in the exhibit.

Based on the output from this command, which of the following statements is correct?
A. Traffic shaping is being applied to this session.
B. This is an ICMP session.
C. This is a UDP session.
D. This traffic has been authenticated.
E. This session matches a firewall policy with ID 5.
正解：A

質問 6：
Which of the following statements are correct regarding Application Control?
A. Application Control can be applied to SSL encrypted traffic.
B. Application Control is based on the IPS engine.
C. Application Control cannot be applied to SSL encrypted traffic.
D. Application Control is based on the AV engine.
正解：A,B

質問 7：
Which of the following statements is correct about configuring web filtering overrides?
A. Admin overrides require an administrator to manually allow pending override requests which are listed in the Override Monitor.
B. Using Web Filtering Overrides requires the use of Firewall Policy Authentication.
C. The Override Scopes of User and User Group are only for use when Firewall Policy Authentication is also being used.
D. The Override option for FortiGuard Web Filtering is available for any user group type.
正解：C