Fortinet FCNSP.v5 問題集

質問 1：
Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the Exhibit.

Which of the following statements is correct regarding this output? (Select one answer).
A. Two tunnels are up
B. Two tunnels are rekeying
C. One tunnel is up
D. One tunnel is rekeying
正解：A

質問 2：
What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply.)
A. Using a hub and spoke topology provides stronger encryption.
B. Using a hub and spoke topology simplifies configuration because fewer tunnels are required.
C. The routing at a spoke is simpler, compared to a meshed node.
D. Using a hub and spoke topology is required to achieve full redundancy.
正解：B,C

質問 3：
Based on the web filtering configuration illustrated in the exhibit, which one of the following statements is not a reasonable conclusion?

A. Users can access both the www.google.com site and the www.fortinet.com site.
B. Downloaded content from www.google.com will be scanned for viruses if antivirus is enabled.
C. When a user attempts to access the www.google.com site, the FortiGate unit will not perform web filtering on the content of that site.
D. When a user attempts to access the www.fortinet.com site, any remaining web filtering will be bypassed.
正解：C

質問 4：
Which of the following statements is correct about configuring web filtering overrides?
A. Admin overrides require an administrator to manually allow pending override requests which are listed in the Override Monitor.
B. Using Web Filtering Overrides requires the use of Firewall Policy Authentication.
C. The Override Scopes of User and User Group are only for use when Firewall Policy Authentication is also being used.
D. The Override option for FortiGuard Web Filtering is available for any user group type.
正解：C

質問 5：
Which part of an email message exchange is NOT inspected by the POP3 and IMAP proxies?
A. File attachments
B. Message body
C. Message headers
D. TCP connection
正解：D

質問 6：
Examine the following log message for IPS and identify the valid responses below. (Select all that apply.)
2012-07-01 09:54:28 oid=2 log_id=18433 type=ips subtype=anomaly pri=alert vd=root severity="critical" src="192.168.3.168" dst="192.168.3.170" src_int="port2" serial=0 status="detected" proto=1 service="icmp" count=1 attack_name="icmp_flood" icmp_id="0xa8a4" icmp_type="0x08" icmp_code="0x00" attack_id=16777316 sensor="1" ref="http://www.fortinet.com/ids/VID16777316" msg="anomaly: icmp_flood, 51 > threshold 50"
A. The target is 192.168.3.168.
B. The target is 192.168.3.170.
C. The attack was TCP based.
D. The attack was detected only.
E. The attack was detected and blocked.
正解：B,D

質問 7：
Which of the following statements correctly describes the deepscan option for HTTPS?
A. When deepscan is disabled, only the web server certificate is inspected; no decryption of content occurs.
B. With deepscan enabled, archived files will be decompressed before scanning for a more comprehensive file inspection.
C. Deepscan is only applicable to mail protocols, where all IP addresses in the header are checked.
D. Enabling deepscan will perform further checks on the server certificate.
正解：A