Online Access Free FCNSA.v5 Exam Questions

A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profiles applied to this policy.
Exhibit A: Exhibit B:


What is the correct behavior when the email attachment is detected as a virus by the FortiGate antivirus engine?

• A.The FortiGate unit will reject the infected email and notify the sender.
• B.The FortiGate unit will remove the infected file and add a replacement message. Both sender and recipient are notified that the infected file has been removed.
• C.The FortiGate unit will reject the infected email and the sender will receive a failed delivery message.
• D.The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected.

Which email filter is NOT available on a FortiGate device?

• A.Spam object checksums.
• B.Email addresses included in the body of known SPAM messages.
• C.URLs included in the body of known SPAM messages.
• D.Spam grey listing.
• E.Sender IP reputation database.

Which of the following options can you use to update the virus definitions on a FortiGate unit? (Select all that apply.)

• A.Manual update
• B.Scheduled update
• C.FTP update
• D.Push update

Which statement is correct regarding virus scanning on a FortiGate unit?

• A.Fortinet Customer Support enables virus scanning remotely for you.
• B.Virus scanning must be enabled in a protection profile and the protection profile must be assigned to a firewall policy.
• C.Virus scanning is enabled by default.
• D.Enabling virus scanning in a protection profile enables virus scanning for all traffic flowing through the FortiGate.

By default the Intrusion Protection System (IPS) on a FortiGate unit is set to perform which action?

• A.Block the most common network attacks.
• B.Allow and log all traffic.
• C.Allow all traffic.
• D.Block all network attacks.