Online Access Free FCNSP Exam Questions

If Routing Information Protocol (RIP) version 1 or version 2 has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through RIP need to be advertised into Open Shortest Path First (OSPF)?

• A.The network administrator needs to configure a RIP to OSPF announce policy as part of the RIP settings.
• B.At a minimum, the network administrator needs to enable Redistribute RIP in the OSPF Advanced Options.
• C.At a minimum, the network administrator needs to enable Redistribute Default in the OSPF Advanced Options.
• D.The FortiGate unit will automatically announce all routes learned through RIP v1 or v2 to its OSPF neighbors.
• E.The FortiGate unit will automatically announce all routes learned only through RIP v2 to its OSPF neighbors.

When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search option.
What is a valid reason for using the Full Search option, instead?

• A.You want the search to include content archive data as well.
• B.The search items you are looking for are not contained in indexed log fields.
• C.A quick search only searches data received within the last 24 hours.
• D.You want the search to include the FortiAnalyzer's local logs.

Which of the following statements are correct regarding virtual domains (VDOMs)? (Select all that apply.)

• A.VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units.
• B.A management VDOM handles SNMP, logging, alert email, and FDN-based updates.
• C.Only administrative users with a 'super_admin' profile will be able to enter multiple VDOMs to make configuration changes.
• D.VDOMs share firmware versions, as well as antivirus and IPS databases.

In order to load-share traffic using multiple static routes, the routes must be configured with ...

• A.a distance equal to its desired weight for ECMP but all must have the same priority.
• B.the same distance and same priority.
• C.the same distance but each of them must be assigned a unique priority.
• D.the same distance and the same weight.

With FSSO, a domain user could authenticate either against the domain controller running the Collector Agent and Domain Controller Agent, or a domain controller running only the Domain Controller Agent.
If you attempt to authenticate with the Secondary Domain Controller running only the Domain Controller Agent, which of the following statements are correct? (Select all that apply.)

• A.The user cannot be authenticated with the FortiGate device in this manner because each Domain Controller Agent requires a dedicated Collector Agent.
• B.The Collector Agent performs the DNS lookup for the authenticated client's IP address.
• C.The login event is sent to the Collector Agent.
• D.The FortiGate unit receives the user information from the Domain Controller Agent of the Secondary Controller.