FCNSP Dumps FCNSP Braindumps
FCNSP Real Questions FCNSP Practice Test FCNSP Actual Questions
killexams.com Fortinet FCNSP
Fortinet Certified Network Security Professional
https://killexams.com/pass4sure/exam-detail/FCNSP
Given the high volume of global traffic on the network, which of the following CLI
commands will best allow the administrator to perform this troubleshooting operation?
diagnose sniffer any
diagnose sniffer packet dmz “”3
diagnose sniffer packet any “host 192.168.1.100” and host 192.168.10.100 “3
diagnose sniffer packet any “host 192.168.1.100” and host 192.168.10.100 “4
Which of the following must be configured on a ForiGate unit to redirect content request to remote web cache servers?
WCCP must be enabled on the interface facing the web cache.
You must enabled exhibit Web-proxy on the incoming interface.
WCCP must be enabled as a global setting on the FortiGate unit.
MCCP must be enabled on all interface on the FortiGate unit through which HTTP traffic is passing.
Both the FortiGate and FortiAnalyzer unite can notify administrators when certain alert conditions are met. Considering this, which of the following statements is NOT correct?
On a FortiGate device, the alert condition is based either on the severity level or on the log type, but note on a combination of the two.
On a FortiAnalyzer device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.
Only a FortiAnalyzer device can send the alert notification in the form of a syslog message.
Both the FortiGate and FortiAnalyzer devices can send alert notification in the form of an email alert.
Which of the following statements it correct regarding the ForiGuard ServicesWeb Filtering Override configuration as illustrated in the exhibit?
Any client on the same subnet as the authenticated user in allowed to access www.yahoo.com/images/.
A client with an IP of address 10.10.10.12 is allowed access to the www.yahoo.com/images/
web site and any of its offsite URLs.
A client with an IP of address 10.10.10.12 is allowed access to any URL under the www.yahoo.com web site, including any subdirectory URLs, until August 7, 2009.
Any client on the same subnet as the authenticated user in allowed to access www.yahoo.com/images/ until August 7, 2009.
Bob wants to Alice a file that is encrypted using public key cryptography. Which of the following statements is correct regarding the use of public key cryptography in this scenario?
Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file.
Bob will use his public key to encrypt the file and Alice will use Bob’s private key to decrypt the file.
Bob will use Alice’s public key to encrypt the file and Alice will use her private key to decrypt the file.
Bob will use his public key to encrypt the file and Alice will use Alice private key to decrypt the file.
Bob will use Alice’s public key to encrypt the file and Alice will use Bob’s public key to decrypt the file.
An administrator is configured a DLP rule for FTP traffic. When adding the rule to a DLP sensor, the administrator notes that the Ban Sender action is not available (greyed-out), as shown in the exhibit.
Which of the following is the best explanation for the Ban Sender action NOT being available?
The Ban sender action is never available for FTP traffic.
The Ban Sender action needs to be enabled globally for FTP traffic on the FortiGate unit before configuring the sensor.
Firewall policy authentication is required before the Ban Sender action becomes available.
The Ban Sender action is only available for known domains. No domains have yet been added to the domain list.
If Routing Information Protocol (RIP) version 1 or version 2 has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through RIP need to be advertised into Option Shortest Path First (OSPF)?
The FortiGate unit will automatically announce all routes learned through RIP v1 or v2 to its OSPF neighbors.
The FortiGate unit will automatically announce all routes learned only through RIP v2 to its OSPF neighbors.
At a minimum, administrator needs to enable Redistribute RIP in the OSPF Advanced Options.
The network administrator needs to configure a RIP to OSPF announce policy as part of the RIP settings.
At a minimum, administrator needs to enable Redistribute Default in the OSPF Advanced Options.