Fortinet FCNSP.v5 問題集

質問 1：
An intermittent connectivity issue is noticed between two devices located behind the FortiGate dmz and internal interfaces. A continuous sniffer trace is run on the FortiGate unit that the administrator will convert into a .cap file for an off-line analysis with a sniffer application.

Given the high volume of global traffic on the network, which of the following CLI commands will best allow the administrator to perform this troubleshooting operation?
A. diagnose sniffer packet dmz "" 3
B. diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 3
C. diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 4
D. diagnose sniffer packet any
正解：B

質問 2：
Review the output of the command get router info routing-table all shown in the Exhibit below; then answer the question following it.

Which one of the following statements correctly describes this output?
A. OSPF does not support ECMP therefore only the first route to subnet 10.0.1.0/24 is used.
B. The two routes to the 10.0.2.0/24 subnet are ECMP routes and traffic will be load balanced based on the configured ECMP settings.
C. The route to the 10.0.2.0/24 subnet via interface Remote_1 is the active and the route via Remote_2 is the backup.
D. 172.16.2.1 is the preferred gateway for subnet 10.0.2.0/24.
正解：B

質問 3：
An administrator wishes to generate a report showing Top Traffic by service type. They notice that web traffic overwhelms the pie chart and want to exclude the web traffic from the report.
Which of the following statements best describes how to do this?
A. When editing the chart, uncheck wlog to indicate that Web Filtering data is being excluded when generating the chart.
B. In the Service field of the Data Filter, type 80/tcp and select the NOT checkbox.
C. Add the following entry to the Generic Field section of the Data Filter: service="!web".
D. When editing the chart, enter 'http' in the Exclude Service field.
正解：B

質問 4：
Which of the following statements is correct based on the firewall configuration illustrated in the exhibit?

A. A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access any services.
B. A user can access the Internet using only the protocols that are supported by user
authentication.
C. A user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP. These require authentication before the user will be allowed access.
D. A user cannot access the Internet using any protocols unless the user has passed firewall authentication.
正解：D

質問 5：
Which of the following DLP actions will always be performed if it is selected?
A. None
B. Quarantine Interface
C. Ban
D. Block
E. Ban Sender
F. Quarantine IP Address
G. Archive
正解：G

質問 6：
You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You have chosen to use Interface Mode when configuring the VPN tunnel and you want users from either side to be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate unit already has a default route.
Which of the following configuration steps are required to achieve these objectives? (Select all that apply.)
A. Add a route for incoming traffic.
B. Create a phase 1 definition.
C. Create two firewall policies.
D. Create a phase 2 definition.
E. Add a route for the remote subnet.
F. Create one firewall policy.
正解：B,C,D,E

質問 7：
When viewing the Banned User monitor in Web Config, the administrator notes the entry illustrated in the exhibit.

Which of the following statements is correct regarding this entry?
A. The entry displays a ban that has been added as a result of traffic triggering a configured DLP rule.
B. The entry displays a ban that was triggered by HTTP traffic matching an IPS signature. This client is banned from receiving or sending any traffic through the FortiGate.
C. The entry displays a quarantine, which could have been added by either IPS or DLP.
D. This entry displays a ban entry that was added manually by the administrator on June11th.
正解：A