Fortinet Certified Network Security Professional (FCNSP v4.2) Sample Questions:

1. A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit.

Which of the following statements are true if the network administrator wants to route traffic between all the VDOMs? (Select all that apply.)

A) As each VDOM has an independant routing table, routing rules need to be set (for example, static routing, OSPF) in each VDOM to route traffic between VDOMs.
B) As with all FortiGate unit interfaces, firewall policies must be in place for traffic to be allowed to pass through any interface, including inter-VDOM links. This provides the same level of security internally as externally.
C) This configuration requires the use of an external router.
D) Inter-VDOM routing is automatically provided if all the subnets that need to be routed are locally attached.
E) The administrator should configure inter-VDOM links to avoid using external interfaces and routers.

2. Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the Exhibit.

Which of the following statements is correct regarding this output? (Select one answer).

A) One tunnel is rekeying
B) Two tunnels are rekeying
C) Two tunnels are up
D) One tunnel is up

3. Which of the following DLP actions will always be performed if it is selected?

A) Quarantine IP Address
B) Ban Sender
C) Archive
D) Quarantine Interface
E) Block
F) None
G) Ban

4. A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the AntiVirus and Email Filter profiles applied to this policy.

What is the correct behavior when the email attachment is detected as a virus by the FortiGate AntiVirus engine?

A) The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected.
B) The FortiGate unit will reject the infected email and notify the sender.
C) The FortiGate unit will reject the infected email and notify both the sender and recipient.
D) The FortiGate unit will remove the infected file and add a replacement message. Both sender and recipient are notified that the infected file has been removed.

5. Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of 'diag sys session stat' for the STUDENT device. Exhibit B shows
the command output of 'diag sys session stat' for the REMOTE device. Exhibit A:

Exhibit B:

Given the information provided in the exhibits, which of the following statements are correct? (Select all that apply.)

A) The cluster mode is definitely Active-Passive.
B) There is not enough information to determine the cluster mode.
C) Session-pickup is likely to be enabled.
D) STUDENT is likely to be the master device.

Solutions: