Online Access Free FCNSP.v5 Exam Questions

An administrator is examining the attack logs and notices the following entry:
device_id=FG100A3907508962 log_id=18432 subtype=anomaly type=ips timestamp=1270017358 pri=alert itime=1270017893 severity=critical src=192.168.1.52 dst=64.64.64.64 src_int=internal serial=0 status=clear_session proto=6 service=http vd=root count=1 src_port=35094 dst_port=80 attack_id=100663402 sensor=protect-servers ref=http://www.fortinet.com/ids/VID100663402 msg="anomaly: tcp_src_session, 2 > threshold 1" policyid=0 carrier_ep=N/A profile=N/A dst_int=N/A user=N/A group=N/A
Based solely upon this log message, which of the following statements is correct?

• A.The number of concurrent connections to destination IP address 64.64.64.64 has exceeded the configured threshold.
• B.This attack was blocked by the HTTP protocol decoder.
• C.This attack was caught by the DoS sensor "protect-servers".
• D.This attack was launched against the FortiGate unit itself rather than a host behind the FortiGate unit.

Identify the statement which correctly describes the output of the following command:
diagnose ips anomaly list

• A.Lists the configured DoS policy.
• B.Lists the errors captured when compiling the DoS policy.
• C.List the real-time counters for the configured DoS policy.

Which of the following items are considered to be advantages of using the application control features on the FortiGate unit?
Application control allows an administor to:

• A.check which applications are installed on workstations attempting to access the network.
• B.set a unique session-ttl for select applications.
• C.customize application types in a similar way to adding custom IPS signatures.
• D.enable AV scanning per application rather than per policy.

Examine the Exhibit shown below; then answer the question following it.

In this scenario, the Fortigate unit in Ottawa has the following routing table: S* 0.0.0.0/0 [10/0] via 172.20.170.254, port2 C 172.20.167.0/24 is directly connected, port1 C 172.20.170.0/24 is directly connected, port2
Sniffer tests show that packets sent from the Source IP address 172.20.168.2 to the Destination IP address 172.20.169.2 are being dropped by the FortiGate unit located in Ottawa. Which of the following correctly describes the cause for the dropped packets?

• A.The reverse path forwarding check.
• B.The destination workstation 172.20.169.2 does NOT have the subnet 172.20.168.0/24 in its routing table.
• C.The forward policy check.
• D.The subnet 172.20.169.0/24 is NOT in the Ottawa FortiGate unit's routing table.

A FortiGate unit is configured with multiple VDOMs. An administrative account on the device has been assigned a Scope value of VDOM:root.
Which of the following items would an administrator logging in using this account NOT be able to configure?

• A.Firewall addresses
• B.FortiGuard Distribution Network configuration
• C.DHCP servers
• D.PPTP VPN configuration