Online Access Free FCNSP Exam Questions

Which of the following cannot be used in conjunction with the endpoint compliance check?

• A.Any form of firewall policy authentication.
• B.Traffic shaping.
• C.HTTP Challenge Redirect to a Secure Channel (HTTPS) in the Authentication Settings.
• D.WAN optimization.

Review the output of the command get router info routing-table all shown in the Exhibit below; then answer the question following it.

Which one of the following statements correctly describes this output?

• A.The route to the 10.0.2.0/24 subnet via interface Remote_1 is the active and the route via Remote_2 is the backup.
• B.172.16.2.1 is the preferred gateway for subnet 10.0.2.0/24.
• C.The two routes to the 10.0.2.0/24 subnet are ECMP routes and traffic will be load balanced based on the configured ECMP settings.
• D.OSPF does not support ECMP therefore only the first route to subnet 10.0.1.0/24 is used.

What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)

• A.Only applies to UDP and ICMP connections.
• B.Enable session pick-up.
• C.Only applies to connections handled by a proxy.
• D.Connections must not be handled by a proxy.

Which of the following statements is correct based on the firewall configuration illustrated in the exhibit?

• A.A user can access the Internet using only the protocols that are supported by user
  authentication.
• B.A user cannot access the Internet using any protocols unless the user has passed firewall authentication.
• C.A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access any services.
• D.A user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP. These require authentication before the user will be allowed access.

Both the FortiGate and FortiAnalyzer units can notify administrators when certain alert conditions are met.
Considering this, which of the following statements is NOT correct?

• A.Both the FortiGate and FortiAnalyzer devices can send alert notifications in the form of an email alert.
• B.Only a FortiAnalyzer device can send the alert notification in the form of a syslog message.
• C.On a FortiAnalyzer device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.
• D.On a FortiGate device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.