Fortinet FCNSP.v5 問題集

質問 1：
Review the output of the command get router info routing-table database shown in the Exhibit below; then answer the question following it.

Which of the following statements are correct regarding this output? (Select all that apply).
A. There will be two default routes in the routing table.
B. There will be six routes in the routing table.
C. There will be two routes for the 10.0.2.0/24 subnet in the routing table.
D. There will be seven routes in the routing table.
正解：A,B

質問 2：
Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the Exhibit below.

Which of the following statements are correct regarding this output? (Select all that apply.)
A. The tunnel is idle.
B. The connecting client has been allocated address 10.200.3.1.
C. The connecting client has been allocated address 172.20.1.1.
D. In the Phase 1 settings, dead peer detection is enabled.
正解：C,D

質問 3：
An administrator is examining the attack logs and notices the following entry:
device_id=FG100A3907508962 log_id=18432 subtype=anomaly type=ips timestamp=1270017358 pri=alert itime=1270017893 severity=critical src=192.168.1.52 dst=64.64.64.64 src_int=internal serial=0 status=clear_session proto=6 service=http vd=root count=1 src_port=35094 dst_port=80 attack_id=100663402 sensor=protect-servers ref=http://www.fortinet.com/ids/VID100663402 msg="anomaly: tcp_src_session, 2 > threshold 1" policyid=0 carrier_ep=N/A profile=N/A dst_int=N/A user=N/A group=N/A
Based solely upon this log message, which of the following statements is correct?
A. This attack was caught by the DoS sensor "protect-servers".
B. The number of concurrent connections to destination IP address 64.64.64.64 has exceeded the configured threshold.
C. This attack was launched against the FortiGate unit itself rather than a host behind the FortiGate unit.
D. This attack was blocked by the HTTP protocol decoder.
正解：A

質問 4：
What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)
A. Only applies to connections handled by a proxy.
B. Enable session pick-up.
C. Connections must not be handled by a proxy.
D. Only applies to UDP and ICMP connections.
正解：B,C

質問 5：
A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit.

Which of the following statements are true if the network administrator wants to route traffic between all the VDOMs? (Select all that apply.)
A. As each VDOM has an independant routing table, routing rules need to be set (for example, static routing, OSPF) in each VDOM to route traffic between VDOMs.
B. This configuration requires the use of an external router.
C. As with all FortiGate unit interfaces, firewall policies must be in place for traffic to be allowed to pass through any interface, including inter-VDOM links. This provides the same level of security internally as externally.
D. Inter-VDOM routing is automatically provided if all the subnets that need to be routed are locally attached.
E. The administrator should configure inter-VDOM links to avoid using external interfaces and routers.
正解：A,C,E

質問 6：
A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the AntiVirus and Email Filter profiles applied to this policy.

What is the correct behavior when the email attachment is detected as a virus by the FortiGate AntiVirus engine?
A. The FortiGate unit will reject the infected email and notify both the sender and recipient.
B. The FortiGate unit will remove the infected file and add a replacement message. Both sender and recipient are notified that the infected file has been removed.
C. The FortiGate unit will reject the infected email and notify the sender.
D. The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected.
正解：D

質問 7：
Which of the following statements are TRUE for Port Pairing and Forwarding Domains? (Select all that apply.)
A. They may contain physical and/or virtual interfaces.
B. They are only available in high-end models.
C. Port Pairing works only for physical interfaces.
D. They both create separate broadcast domains.
E. Forwarding Domains only apply to virtual interfaces.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)