Online Access Free FCNSP.v5 Exam Questions

SSL Proxy is used to decrypt the SSL-encrypted traffic. After decryption, where is the traffic buffered in preparation for content inspection?

• A.The file is buffered by the SSL proxy.
• B.The file is buffered by the application proxy.
• C.In the upload direction, the file is buffered by the SSL proxy. In the download direction, the file is buffered by the application proxy.
• D.No file buffering is needed since a stream-based scanning approach is used for SSL content inspection.

Identify the correct properties of a partial mesh VPN deployment:

• A.VPN tunnels are not configured between every single location.
• B.Some locations are reached via a hub location.
• C.There are no hub locations in a partial mesh.
• D.VPN tunnels interconnect between every single location.

Examine the Exhibits shown below, then answer the question that follows.
Review the following DLP Sensor (Exhibit 1):

Review the following File Filter list for rule #1 (Exhibit 2):

Review the following File Filter list for rule #2 (Exhibit 3):

Review the following File Filter list for rule #3 (Exhibit 4):

An MP3 file is renamed to 'workbook.exe' and put into a ZIP archive. It is then sent through the FortiGate device over HTTP. It is intercepted and processed by the configuration shown in the above Exhibits 1-4.
Assuming the file is not too large for the File scanning threshold, what action will the FortiGate unit take?

• A.The file will be detected by rule #3 as an Archive(zip), blocked, and a log entry will be created.
• B.The file will be detected by rule #1 as an 'Audio (mp3)', a log entry will be created and it will be allowed to pass through.
• C.Nothing, the file will go undetected.
• D.The file will be detected by rule #2 as a "*.exe", a log entry will be created and the interface that received the traffic will be brought down.

Examine the Exhibit shown below; then answer the question following it.

The Vancouver FortiGate unit initially had the following information in its routing table:
S 172.20.0.0/16 [10/0] via 172.21.1.2, port2 C 172.21.0.0/16 is directly connected, port2 C 172.11.11.0/24 is directly connected, port1
Afterwards, the following static route was added:
config router static edit 6 set dst 172.20.1.0 255.255.255.0 set pririoty 0 set device port1 set gateway 172.11.12.1
next end
Since this change, the new static route is NOT showing up in the routing table. Given the information provided, which of the following describes the cause of this problem?

• A.The subnet 172.20.1.0/24 is overlapped with the subnet of one static route that is already in the routing table (172.20.0.0/16), so, we need to enable allow-subnet-overlap first.
• B.The 'gateway' IP address is NOT in the same subnet as the IP address of port1.
• C.The static route configuration is missing the distance setting.
• D.The priority is 0, which means that the route will remain inactive.

When viewing the Banned User monitor in Web Config, the administrator notes the entry illustrated in the exhibit.

Which of the following statements is correct regarding this entry?

• A.The entry displays a ban that has been added as a result of traffic triggering a configured DLP rule.
• B.This entry displays a ban entry that was added manually by the administrator on June11th.
• C.The entry displays a quarantine, which could have been added by either IPS or DLP.
• D.The entry displays a ban that was triggered by HTTP traffic matching an IPS signature. This client is banned from receiving or sending any traffic through the FortiGate.