Fortinet fortinet certified network security administrator 認定 FCNSA 試験問題:

1. Which of the following statements regarding Banned Words are correct? (Select all that apply.)

A) The FortiGate unit can scan web pages and email messages for instances of banned words.
B) Content is automatically blocked if a single instance of a banned word appears.
C) Banned words can be expressed as wildcards or regular expressions.
D) The FortiGate unit includes a pre-defined library of common banned words.
E) When creating a banned word list, an administrator can indicate either specific words or patterns.

2. An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet.
What must the user have for a successful authentication? (Select all that apply.)

A) An entry in a supported LDAP Directory.
B) A valid username and password.
C) Membership in a firewall user group.
D) A digital certificate issued by the FortiGate unit.
E) A digital certificate issued by any CA server.

3. The FortiGate Web Config provides a link to update the firmware in the System > Status window.
Clicking this link will perform which of the following actions?

A) It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit.
B) It will present a prompt to allow browsing to the location of the firmware file.
C) It will connect to the Fortinet support site where the appropriate firmware version can be selected.
D) It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.

4. Because changing the operational mode to Transparent resets device (or vdom) to all defaults, which precautions should an Administrator take prior to performing this? (Select all that apply.)

A) Set the unit to factory defaults.
B) Disconnect redundant cables to ensure the topology will not contain layer 2 loops.
C) Backup the configuration.
D) Update IPS and AV files.

5. You wish to create a firewall policy that applies only to traffic intended for your web server. The server has an IP address of 192.168.2.2 and belongs to a class C subnet.
When defining the firewall address for use in this policy, which one of the following addressing formats is correct?

A) 192.168.2.2 / 255.255.255.0
B) 192.168.2.0 / 255.255.255.0
C) 192.168.2.0 / 255.255.255.255
D) 192.168.2.2 / 255.255.255.255

質問と回答：