Online Access Free FCNSP Exam Questions

Examine the exhibit shown below then answer the question that follows it.

Within the UTM Proxy Options, the CA certificate Fortinet_CA_SSLProxy defines which of the following:

• A.FortiGate unit's encryption certificate used by the SSL proxy.
• B.FortiGuard's encryption certificate used by the SSL proxy.
• C.FortiGuard's signing certificate used by the SSL proxy.
• D.FortiGate unit's signing certificate used by the SSL proxy.

An administrator logs into a FortiGate unit using an account which has been assigned a super_admin profile. Which of the following operations can this administrator perform?

• A.They can delete the admin account if the default admin user is not logged in.
• B.They can make changes to the super_admin profile.
• C.They can view all the system configuration settings but can not make changes.
• D.They can access configuration options for only the VDOMs to which they have been assigned.
• E.They can delete logged-in users who are also assigned the super_admin access profile.

FSSO provides a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows Active Directory.
Which of the following statements are correct regarding FSSO in a Windows domain environment when NTLM and Polling Mode are not used? (Select all that apply.)

• A.An FSSO Domain Controller Agent must be installed on every domain controller.
• B.For non-domain computers, the only way to allow FSSO authentication is to install an FSSO client.
• C.The FSSO Collector Agent will retrieve user information from the Domain Controller Agent and will send the user logon information to the FortiGate unit.
• D.The FSSO Domain Controller Agent will regularly update user logon information on the FortiGate unit.
• E.An FSSO Collector Agent must be installed on every domain controller.

Which of the following statements are correct regarding the configuration of a FortiGate unit as an SSL VPN gateway? (Select all that apply.)

• A.The specific routes needed to access internal resources through an SSL VPN connection in tunnel mode from the client computer are defined in the routing widget associated with the SSL VPN portal.
• B.Tunnel mode can only be used if the SSL VPN user groups have at least one Host Check option enabled.
• C.In order to apply a portal to a user, that user must belong to an SSL VPN user group.
• D.The portal settings specify whether the connection will operate in web-only or tunnel mode.

An administrator has formed a High Availability cluster involving two FortiGate 310B units.
[Multiple upstream Layer 2 switches] -- [ FortiGate HA Cluster ] -- [ Multiple downstream Layer 2 switches ]
The administrator wishes to ensure that a single link failure will have minimal impact upon the overall throughput of traffic through this cluster.
Which of the following options describes the best step the administrator can take?
The administrator should...

• A.enable monitoring of all active interfaces.
• B.increase the number of FortiGate units in the cluster and configure HA in Active-Active mode.
• C.set up a full-mesh design which uses redundant interfaces.
• D.configure the HA ping server feature to allow for HA failover in the event that a path is disrupted.