nerdexam
Fortinet

FCNSP · Question #119

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121. Users have…

The correct answer is A. Create a new session helper for the FTP service monitoring port 2121. See the full explanation below for the reasoning.

Question

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121. Users have been complaining that when downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message. Which of the following statements represents the best solution to this problem?

Options

  • ACreate a new session helper for the FTP service monitoring port 2121.
  • BEnable the ANY service in the firewall policies for both incoming and outgoing traffic.
  • CPlace the client and server interface in the same zone and enable intra-zone traffic.
  • DDisable any protection profiles being applied to FTP traffic.

How the community answered

(59 responses)
  • A
    71% (42)
  • B
    17% (10)
  • C
    5% (3)
  • D
    7% (4)

Community Discussion

No community discussion yet for this question.

Full FCNSP Practice