Fortinet Certified Network Security Administrator (FCNSA.v5) 認定 FCNSA.v5 試験問題:

1. Encrypted backup files provide which of the following benefits? (Select all that apply.)

A) Integrity of the backup file is protected since it cannot be easily modified when encrypted.
B) Fortinet Technical Support can recover forgotten passwords with a backdoor passphrase.
C) Prevents the backup file from becoming corrupted.
D) Protects details of the device's configuration settings from being discovered while the backup file is in transit. For example, transferred to a data centers for system recovery.
E) A copy of the encrypted backup file is automatically pushed to the FortiGuard Distribution Service (FDS) for disaster recovery purposes. If the backup file becomes corrupt it can be retrieved through FDS.

2. SSL content inspection is enabled on the FortiGate unit. Which of the following steps is required to prevent a user from being presented with a web browser warning when accessing an SSL-encrypted website?

A) Disable the strict server certificate check in the web browser under Internet Options.
B) The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the user's workstation.
C) Enable transparent proxy mode on the FortiGate unit.
D) Enable NTLM authentication on the FortiGate unit. NTLM authentication suppresses the certificate warning messages in the web browser.

3. Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

A) Syslog
B) Local disk and/or memory
C) LDAP
D) FortiAnalyzer

4. A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profiles applied to this policy.
Exhibit A: Exhibit B:


What is the correct behavior when the email attachment is detected as a virus by the FortiGate antivirus engine?

A) The FortiGate unit will reject the infected email and the sender will receive a failed delivery message.
B) The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected.
C) The FortiGate unit will remove the infected file and add a replacement message. Both sender and recipient are notified that the infected file has been removed.
D) The FortiGate unit will reject the infected email and notify the sender.

5. Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides is NOT correct?

A) When requesting an override, the matched user must belong to a user group for which the override capabilty has been enabled.
B) A web filter profile may only have one user group defined as an override group.
C) Overrides can be allowed by the administrator for a specific period of time.
D) A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.

質問と回答：