Online Access Free FCNSA Exam Questions

DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)

• A.HTTP
• B.POP3
• C.SNMP
• D.SMTP
• E.IPSec

Which of the following statements correctly describes how a push update from the FortiGuard Distribution Network (FDN) works?

• A.The FDN continues to send push updates until the FortiGate unit sends an acknowledgement.
• B.The FDN sends a message to the FortiGate unit that there is an update available and that the FortiGate unit should download the update.
• C.The FDN sends package updates automatically to the FortiGate unit without requiring an update request.
• D.The FDN sends push updates only once.

Which of the following items does NOT support the Logging feature?

• A.Web URL filtering
• B.File Filter
• C.Application control
• D.Administrator activities
• E.Session timeouts

In which order are firewall policies processed on the FortiGate unit?

• A.They are processed from the top down as they appear in Web Config.
• B.They are processed based on the policy ID number shown in the left hand column of the policy window.
• C.They are processed using a policy hierarchy scheme that allows for multiple decision branching.
• D.They are processed based on a priority value assigned through the priority column in the policy window.

A FortiGate 60 unit is configured for your small office. The DMZ interface is connected to a network containing a web server and email server. The Internal interface is connected to a network containing 10 user workstations and the WAN1 interface is connected to your ISP.
You want to configure firewall policies so that your users can send and receive email messages to the email server on the DMZ network. You also want the email server to be able to retrieve email messages from an email server hosted by your ISP using the POP3 protocol.
Which policies must be created for this communication? (Select all that apply.)

• A.DMZ > WAN1
• B.WAN1 > Internal
• C.Internal > WAN1
• D.DMZ > Internal
• E.Internal > DMZ
• F.WAN1 > DMZ