FCNSP Dumps FCNSP Braindumps FCNSP Real Questions FCNSP Practice Test FCNSP Actual Questions Fortinet FCNSP Fortinet Certified Network Security Professional https://killexams.com/pass4sure/exam-detail/FCNSP Given the high volume of global traffic on the network, which of the following CLI commands will best allow the administrator to perform this troubleshooting operation? A. diagnose sniffer any B. diagnose sniffer packet dmz “”3 C. diagnose sniffer packet any “host 192.168.1.100” and host 192.168.10.100 “3 D. diagnose sniffer packet any “host 192.168.1.100” and host 192.168.10.100 “4 Answer: D QUESTION: 70 Which of the following must be configured on a ForiGate unit to redirect content request to remote web cache servers? A. WCCP must be enabled on the interface facing the web cache. B. You must enabled exhibit Web-proxy on the incoming interface. C. WCCP must be enabled as a global setting on the FortiGate unit. D. MCCP must be enabled on all interface on the FortiGate unit through which HTTP traffic is passing. Answer: B QUESTION: 71 Both the FortiGate and FortiAnalyzer unite can notify administrators when certain alert conditions are met. Considering this, which of the following statements is NOT correct? 30 A. On a FortiGate device, the alert condition is based either on the severity level or on the log type, but note on a combination of the two. B. On a FortiAnalyzer device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two. C. Only a FortiAnalyzer device can send the alert notification in the form of a syslog message. D. Both the FortiGate and FortiAnalyzer devices can send alert notification in the form of an email alert. Answer: B QUESTION: 72 Which of the following statements it correct regarding the ForiGuard ServicesWeb Filtering Override configuration as illustrated in the exhibit? A. Any client on the same subnet as the authenticated user in allowed to access www.yahoo.com/images/. B. A client with an IP of address 10.10.10.12 is allowed access to any subdirectory that is part of the www.yahoo.com web site. C. A client with an IP of address 10.10.10.12 is allowed access to the www.yahoo.com/images/ web site and any of its offsite URLs. D. A client with an IP of address 10.10.10.12 is allowed access to any URL under the www.yahoo.com web site, including any subdirectory URLs, until August 7, 2009. 31 E. Any client on the same subnet as the authenticated user in allowed to access www.yahoo.com/images/ until August 7, 2009. Answer: D QUESTION: 73 Bob wants to Alice a file that is encrypted using public key cryptography. Which of the following statements is correct regarding the use of public key cryptography in this scenario? A. Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file. B. Bob will use his public key to encrypt the file and Alice will use Bob’s private key to decrypt the file. C. Bob will use Alice’s public key to encrypt the file and Alice will use her private key to decrypt the file. D. Bob will use his public key to encrypt the file and Alice will use Alice private key to decrypt the file. E. Bob will use Alice’s public key to encrypt the file and Alice will use Bob’s public key to decrypt the file. Answer: A QUESTION: 74 An administrator is configured a DLP rule for FTP traffic. When adding the rule to a DLP sensor, the administrator notes that the Ban Sender action is not available (greyed-out), as shown in the exhibit. Which of the following is the best explanation for the Ban Sender action NOT being available? 32 A. The Ban sender action is never available for FTP traffic. B. The Ban Sender action needs to be enabled globally for FTP traffic on the FortiGate unit before configuring the sensor. C. Firewall policy authentication is required before the Ban Sender action becomes available. D. The Ban Sender action is only available for known domains. No domains have yet been added to the domain list. Answer: A QUESTION: 75 If Routing Information Protocol (RIP) version 1 or version 2 has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through RIP need to be advertised into Option Shortest Path First (OSPF)? A. The FortiGate unit will automatically announce all routes learned through RIP v1 or v2 to its OSPF neighbors. B. The FortiGate unit will automatically announce all routes learned only through RIP v2 to its OSPF neighbors. C. At a minimum, administrator needs to enable Redistribute RIP in the OSPF Advanced Options. D. The network administrator needs to configure a RIP to OSPF announce policy as part of the RIP settings. E. At a minimum, administrator needs to enable Redistribute Default in the OSPF Advanced Options. Answer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