Fortinet Certified Network Security Administrator (FCNSA.v5) (FCNSA.v5) Free Practice Test

Question 1

A FortiGate unit can create a secure connection to a client using SSL VPN in tunnel mode.
Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.)

A. Software must be downloaded to the web client to be able to use a tunnel mode SSL VPN.

B. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.

C. Split tunneling can be enabled when using tunnel mode SSL VPN.

D. Tunnel mode SSL VPN requires the FortiClient software to be installed on the user's computer.

E. Users attempting to create a tunnel mode SSL VPN connection must be members of a configured user group on the FortiGate unit.

Correct Answer: A,B,C,E

Question 2

A FortiGate 100 unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which of the following statements are possible reasons for this? (Select all that apply.)

A. The FortiGate unit has not been registered.

B. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network.

C. The external facing interface of the FortiGate unit is configured to use DHCP.

D. The FortiGate unit is in Transparent mode.

Correct Answer: A,B,C

Question 3

Which of the following statements are true regarding Local User Authentication? (Select all that apply.)

A. Administrators can create an account for the user locally and specify the remote server to verify the password.

B. Two-factor authentication can be enabled on a per user basis.

C. Local users are for administration accounts only and cannot be used for identity policies.

D. Local user authentication is based on usernames and passwords stored locally on the FortiGate unit.

Correct Answer: A,B,D

Question 4

Which of the following spam filtering methods are supported on the FortiGate unit? (Select all that apply.)

A. Return Email DNS Check

B. Open Relay Database List (ORDBL)

C. Email Checksum Check

D. Black/White List

E. IP Address Check

Correct Answer: A,B,C,D,E

Question 5

Encrypted backup files provide which of the following benefits? (Select all that apply.)

A. Prevents the backup file from becoming corrupted.

B. Protects details of the device's configuration settings from being discovered while the backup file is in transit. For example, transferred to a data centers for system recovery.

C. A copy of the encrypted backup file is automatically pushed to the FortiGuard Distribution Service (FDS) for disaster recovery purposes. If the backup file becomes corrupt it can be retrieved through FDS.

D. Integrity of the backup file is protected since it cannot be easily modified when encrypted.

E. Fortinet Technical Support can recover forgotten passwords with a backdoor passphrase.

Correct Answer: B,D

Question 6

Which of the following Regular Expression patterns will make the term "bad language" case insensitive?

A. /bad language/c

B. "bad language"

C. [bad language]

D. /bad language/i

E. i/bad language/

Correct Answer: D

Welcome to TestSimulate

Fortinet Certified Network Security Administrator (FCNSA.v5) (FCNSA.v5) Free Practice Test