최신Fortinet Certified Network Security Professional (FCNSP.v5) - FCNSP.v5무료샘플문제

A. Common Name

B. Organizational Unit

C. Serial Number

D. Organization

E. Validity

A. The subnet 172.20.1.0/24 is overlapped with the subnet of one static route that is already in the routing table (172.20.0.0/16), so, we need to enable allow-subnet-overlap first.

B. The 'gateway' IP address is NOT in the same subnet as the IP address of port1.

C. The priority is 0, which means that the route will remain inactive.

D. The static route configuration is missing the distance setting.

A. The FortiGate unit will create a session entry in the session table when the traffic is being routed by the blackhole route.

B. Traffic to 172.20.1.0/24 will be shared through both routes.

C. All traffic to 172.20.1.0/24 will always be dropped by the FortiGate unit.

D. The FortiGate unit will NOT create a session entry in the session table when the traffic is being routed by the blackhole route.

E. As long as port1 is up, all the traffic to 172.20.1.0/24 will be routed by the static route number 1. If the interface port1 is down, the traffic will be routed using the blackhole route.

A. VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units.

B. A backup management VDOM will synchronize the configuration from an active management VDOM.

C. A management VDOM handles SNMP, logging, alert email, and FDN-based updates.

D. Only administrative users with a super_admin profile will be able to enter all VDOMs to make configuration changes.

E. VDOMs share firmware versions, as well as antivirus and IPS databases.

A. OSPF Hello packets are not sent on point-to-point networks.

B. OSPF Hello packets will only be sent on interfaces configured with the IP addresses 172.16.1.1 and 172.16.1.2.

C. OSPF Hello packets will be sent on all interfaces of the FortiGate device.

D. OSPF Hello packets will be sent on all interfaces configured with an address matching the 10.0.1.0/24 and 172.16.0.0/12 networks.

A. There is not enough information to determine the cluster mode.

B. Session-pickup is likely to be enabled.

C. STUDENT is likely to be the master device.

D. The cluster mode is definitely Active-Passive.

A. Routes were automatically created based on the address objects in the firewall policies.

B. The IPSec policies must be placed at the top of the list.

C. The virtual IPSec interface is automatically created after the phase1 configuration.

D. To complete the VPN configuration, the administrator must manually create a virtual IPSec interface in Web Config under System > Network.

E. This VPN cannot be used as part of a hub and spoke topology.

A. Place the client and server interface in the same zone and enable intra-zone traffic.

B. Enable the ANY service in the firewall policies for both incoming and outgoing traffic.

C. Disable any protection profiles being applied to FTP traffic.

D. Create a new session helper for the FTP service monitoring port 2121.