Online Access Free FCNSP Exam Questions

An intermittent connectivity issue is noticed between two devices located behind the FortiGate dmz and internal interfaces. A continuous sniffer trace is run on the FortiGate unit that the administrator will convert into a .cap file for an off-line analysis with a sniffer application.

Given the high volume of global traffic on the network, which of the following CLI commands will best allow the administrator to perform this troubleshooting operation?

• A.diagnose sniffer packet any
• B.diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 3
• C.diagnose sniffer packet dmz "" 3
• D.diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 4

Review the output of the command get router info routing-table all shown in the Exhibit below; then answer the question following it.

Which one of the following statements correctly describes this output?

• A.The two routes to the 10.0.2.0/24 subnet are ECMP routes and traffic will be load balanced based on the configured ECMP settings.
• B.OSPF does not support ECMP therefore only the first route to subnet 10.0.1.0/24 is used.
• C.The route to the 10.0.2.0/24 subnet via interface Remote_1 is the active and the route via Remote_2 is the backup.
• D.172.16.2.1 is the preferred gateway for subnet 10.0.2.0/24.

SSL Proxy is used to decrypt the SSL-encrypted traffic. After decryption, where is the traffic buffered in preparation for content inspection?

• A.No file buffering is needed since a stream-based scanning approach is used for SSL content inspection.
• B.The file is buffered by the SSL proxy.
• C.In the upload direction, the file is buffered by the SSL proxy. In the download direction, the file is buffered by the application proxy.
• D.The file is buffered by the application proxy.

Review the IPsec phase1 configuration in the Exhibit shown below; then answer the question following it.

Which of the following statements are correct regarding this configuration? (Select all that apply).

• A.The phase1 is for a policy-based VPN configuration.
• B.The local gateway IP address is 10.200.3.1.
• C.The local gateway IP is the address assigned to port1.
• D.The phase1 is for a route-based VPN configuration.

In order to load-share traffic using multiple static routes, the routes must be configured with ...

• A.a distance equal to its desired weight for ECMP but all must have the same priority.
• B.the same distance and the same weight.
• C.the same distance but each of them must be assigned a unique priority.
• D.the same distance and same priority.