Fortinet FCNSP.v5 問題集

質問 1：
Two FortiGate devices fail to form an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of 'show system ha' for the STUDENT device. Exhibit B shows the command output of 'show system ha' for the REMOTE device.
Exhibit A: Exhibit B


Which one of the following is the most likely reason that the cluster fails to form?
A. Hearbeat
B. Override
C. HA mode
D. Password
正解：C

質問 2：
A network administrator needs to implement dynamic route redundancy between a FortiGate unit located in a remote office and a FortiGate unit located in the central office.
The remote office accesses central resources using IPSec VPN tunnels through two different Internet providers.
What is the best method for allowing the remote office access to the resources through the FortiGate unit used at the central office?
A. Use two or more policy-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.
B. Use two or more route-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.
C. Dynamic routing protocols cannot be used over IPSec VPN tunnels.
D. Use route-based VPNs on the central office FortiGate unit to advertise routes with a dynamic routing protocol and use a policy-based VPN on the remote office with two or more static default routes.
正解：B

質問 3：
Which of the following DLP actions will override any other action?
A. Exempt
B. None
C. Quarantine Interface
D. Block
正解：A

質問 4：
How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)
A. File Nam "*.pptx", "*.docx", "*.xlsx"
B. File TypE. Unknown Filetype(unknown)
C. File TypE. Microsoft Office(msoffice)
D. File TypE. Archive(zip)
E. File NamE. "*.ppt", "*.doc", "*.xls"
正解：A,D

質問 5：
Which of the following cannot be used in conjunction with the endpoint compliance check?
A. WAN optimization.
B. HTTP Challenge Redirect to a Secure Channel (HTTPS) in the Authentication Settings.
C. Traffic shaping.
D. Any form of firewall policy authentication.
正解：B

質問 6：
Which of the following statements is not correct regarding virtual domains (VDOMs)?
A. VDOMs share firmware versions, as well as antivirus and IPS databases.
B. A backup management VDOM will synchronize the configuration from an active management VDOM.
C. Only administrative users with a super_admin profile will be able to enter all VDOMs to make configuration changes.
D. VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units.
E. A management VDOM handles SNMP, logging, alert email, and FDN-based updates.
正解：B

質問 7：
A FortiGate administrator configures a Virtual Domain (VDOM) for a new customer. After creating the VDOM, the administrator is unable to reassign the dmz interface to the new VDOM as the option is greyed out in Web Config in the management VDOM.
What would be a possible cause for this problem?
A. The dmz interface is in PPPoE or DHCP mode.
B. The administrator does not have the proper permissions to reassign the dmz interface.
C. The dmz interface is referenced in the configuration of another VDOM.
D. Non-management VDOMs can not reference physical interfaces.
E. Reassigning an interface to a different VDOM can only be done through the CLI.
正解：C