Fortinet FCNSA.v5 問題集

質問 1：
Which of the following Fortinet products can receive updates from the FortiGuard Distribution Network? (Select all that apply.)
A. FortiMail
B. FortiGate
C. FortiClient
D. FortiAnalyzer
正解：A,B,C

質問 2：
Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides are correct?
(Select all that apply.)
A. A protection profile may have only one user group defined as an override group.
B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
C. Authentication to allow the override is based on a user's membership in a user group.
D. Overrides can be allowed by the administrator for a specific period of time.
正解：B,C,D

質問 3：
Which of the following authentication types are supported by FortiGate units? (Select all that apply.)
A. Kerberos
B. LDAP
C. RADIUS
D. Local Users
正解：B,C,D

質問 4：
In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel between two separate private networks.
Which of the following configuration steps must be performed on both FortiGate units to support this configuration? (Select all that apply.)
A. Configure the appropriate user groups on the FortiGate units to allow users access to the IPSec VPN connection.
B. Define the Phase 2 parameters that the FortiGate unit needs to create a VPN tunnel with the remote peer.
C. Create firewall policies to control traffic between the IP source and destination address.
D. Define the Phase 1 parameters that the FortiGate unit needs to authenticate the remote peers.
E. Set the operating mode of the FortiGate unit to IPSec VPN mode.
正解：B,C,D

質問 5：
By default the Intrusion Protection System (IPS) on a FortiGate unit is set to perform which action?
A. Block the most common network attacks.
B. Allow all traffic.
C. Block all network attacks.
D. Allow and log all traffic.
正解：B

質問 6：
Which of the following statements best describes the green status indicators that appear next to different FortiGuard Distribution Network services as illustrated in the exhibit?

A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Network.
B. They indicate that the FortiGate unit has the latest updates that are available from the FortiGuard Distribution Network.
C. They indicate that updates are available and should be downloaded from the FortiGuard Distribution Network to the FortiGate unit.
D. They indicate that the FortiGate unit is in the process of downloading updates from the FortiGuard Distribution Network.
正解：A

質問 7：
Which of the following statements regarding Banned Words are correct? (Select all that apply.)
A. When creating a banned word list, an administrator can indicate either specific words or patterns.
B. Banned words can be expressed as wildcards or regular expressions.
C. The FortiGate unit can scan web pages and email messages for instances of banned words.
D. The FortiGate unit includes a pre-defined library of common banned words.
E. Content is automatically blocked if a single instance of a banned word appears.
正解：A,B,C

質問 8：
Which of the following email spam filtering features is NOT supported on a FortiGate unit?
A. Greylisting
B. Multipurpose Internet Mail Extensions (MIME) Header Check
C. HELO DNS Lookup
D. Banned Word
正解：A

質問 9：
Which of the following statements is correct regarding URL Filtering on the FortiGate unit?
A. Multiple URL Filter lists can be added to a single Web filter profile.
B. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.
C. The available actions for URL Filtering are Allow and Block.
D. The FortiGate unit can filter URLs based on patterns using text and regular expressions.
正解：D