FCNSA.V4 Exam Questions

An administrator wants to assign a set of UTM features to a group of users. Which of the following is the correct method for doing this?

When firewall policy authentication is enabled, only traffic on supported protocols will trigger an authentication challenge. Select all supported protocols from the following:

A client can establish a secure connection to a corporate network using SSL VPN in tunnel mode. Which of the following statements are correct regarding the use of tunnel mode SSL V...

In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel between two separate private networks. Which of the following configuration steps must be perf...

How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has enabled split tunneling. Given th...

Which of the following antivirus and attack definition update options are supported by FortiGate units? (Select all that apply.)

A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?

Which of the following statements regarding Banned Words are correct? (Select all that apply.)

Which statement is correct regarding virus scanning on a FortiGate unit?

Which of the following statements are correct regarding URL filtering on the FortiGate unit? (Select all that apply.)

Which of the following regular expression patterns will make the terms "confidential data" case insensitive?

Which of the following spam filtering methods are supported on the FortiGate unit? (Select all that apply.)

Which of the following email spam filtering features is NOT supported on a FortiGate unit?

Examine the exhibit shown below; then answer the question following it. Which of the following statements best describes the green status indicators that appear next to the differe...

A FortiGate unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which of the following statements are poss...

A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profil...

Caching improves performance by reducing FortiGate unit requests to the FortiGuard server. Which of the following statements are correct regarding the caching of FortiGuard respons...

For Data Leak Prevention, which of the following describes the difference between the block and quarantine actions?

How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)

What are the valid sub-types for a Firewall type policy? (Select all that apply)

In which order are firewall policies processed on the FortiGate unit?

Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)

The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate unit's GUI and also using the CLI. The command used in the CLI to perform this...

You wish to create a firewall policy that applies only to traffic intended for your web server. The web server has an IP address of 192.168.2.2 and a /24 subnet mask. When defining...

What is the effect of using CLI "config system session-ttl" to set session_ttl to 1800 seconds?

Which of the following network protocols are supported for administrative access to a FortiGate unit?

Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

A FortiGate unit can provide which of the following capabilities? (Select all that apply.)

Which of the following methods can be used to access the CLI? (Select all that apply.)

When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password. If the password is forgotten, the...

When creating administrative users which of the following configuration objects determines access rights on the FortiGate unit.

What is the FortiGate unit password recovery process?

Which of the following statements are true of the FortiGate unit's factory default configuration?

Under the System Information widget on the dashboard, which of the following actions are available for the system configuration? (Select all that apply.)

Encrypted backup files provide which of the following benefits? (Select all that apply.)

The FortiGate unit's GUI provides a link to update the firmware. Clicking this link will perform which of the following actions?

Which of the following products is designed to manage multiple FortiGate devices?

Which of the following products provides dedicated hardware to analyze log data from multiple FortiGate devices?

Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.)

The default administrator profile that is assigned to the default "admin" user on a FortGate device is:____________________.

Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

In order to match an identity-based policy, the FortiGate unit checks the IP information. Once inside the policy, the following logic is followed:

Which of the following statements regarding the firewall policy authentication timeout is true?

Two-factor authentication is supported using the following methods? (Select all that apply.)

Which of the following statements are true regarding Local User Authentication? (Select all that apply.)

Which of the statements below are true regarding firewall policy disclaimers? (Select all that apply.)

Examine the firewall configuration shown below; then answer the question following it. Which of the following statements are correct based on the firewall configuration illustrated...

When browsing to an internal web server using a web-mode SSL VPN bookmark, from which of the following source IP addresses would the web server consider the HTTP request to be init...

An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The tunnel will start up for a few seconds, then shut down. Which of the following statements b...