Fortinet FCNSA 問題集

質問 1：
Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.
How are UTM features applied to traffic?
A. One or more UTM features are enabled in a firewall policy.
B. Enable the appropriate UTM objects and identify one of them as the default.
C. For each UTM object, identify which policy will use it.
D. In the system configuration for that UTM feature, you can identify the policies to which the feature is to be applied.
正解：A

質問 2：
Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?
A. The FortiGate unit commonly uses private IP addresses on the internal network but hides them using network address translation.
B. The FortiGate unit requires only a single IP address for receiving updates and configuring from a management computer.
C. The FortiGate unit uses only DHCP-assigned IP addresses on the internal network.
D. The FortiGate unit must use public IP addresses on both the internal and external networks.
正解：A

質問 3：
FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed.
What action must be taken for one of these profiles to become active?
A. The protection profile must be set as the Active Protection Profile.
B. The protection profile must be assigned to a firewall policy.
C. All of the above.
D. The "Use Protection Profile" option must be selected in the Web Config tool under the sections for AntiVirus, IPS, WebFilter, and AntiSpam.
正解：B

質問 4：
If no firewall policy is specified between two FortiGate interfaces and zones are not used, which of the following statements describes the action taken on traffic flowing between these interfaces?
A. The traffic is blocked.
B. The traffic is blocked and logged.
C. The traffic is passed and logged.
D. The traffic is passed.
正解：A

質問 5：
Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)
A. Syslog
B. Local
C. LDAP
D. FortiAnalyzer
正解：A,B,D

質問 6：
Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.
An administrator must assign a set of UTM features to a group of users.
Which of the following is the correct method for doing this?
A. Enable a set of unique UTM features under "Edit User Group".
B. When defining the UTM objects, the administrator must list the user groups which will use the UTM object.
C. The administrator must apply the UTM features directly to a user object.
D. The administrator must enable the UTM features in an identify-based policy applicable to the user group.
正解：D

質問 7：
Caching improves performance by reducing FortiGate unit requests to the FortiGuard server.
Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.)
A. Caching is available for web filtering, antispam, and IPS requests.
B. The size of the cache will increase to accomodate any number of cached queries.
C. When the cache is full, the least recently used IP address or URL is deleted from the cache.
D. An administrator can configure the number of seconds to store information in the cache before the FortiGate unit contacts the FortiGuard server again.
E. The cache uses a small portion of the FortiGate system memory.
正解：C,D,E