Fortinet Certified Network Security Administrator Set 3

1.

A FortiGate unit can create a secure connection to a client using SSL VPN in tunnel mode. Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.)

Split tunneling can be enabled when using tunnel mode SSL VPN. Software must be downloaded to the web client to be able to use a tunnel mode SSL VPN. Users attempting to create a tunnel mode SSL VPN connection must be members of a configured user group on the FortiGate unit. Tunnel mode SSL VPN requires the FortiClient software to be installed on the user's computer. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.

2.

Which of the following antivirus and attack definition update features are supported by FortiGate units? (Select all that apply.)

Manual, user-initiated updates from the FortiGuard Distribution Network. Hourly, daily, or weekly scheduled antivirus and attack definition and antivirus engine updates from the FortiGuard Distribution Network. Push updates from the FortiGuard Distribution Network. Update status including version numbers, expiry dates, and most recent update dates and times.

3.

By default the Intrusion Protection System (IPS) on a FortiGate unit is set to perform which action?

Block all network attacks. Block the most common network attacks. Allow all traffic. Allow and log all traffic.

4.

A FortiGate unit can scan for viruses on which types of network traffic? (Select all that apply.)

POP3 FTP SMTP SNMP NetBios

5.

Which of the following statements regarding Banned Words are correct? (Select all that apply.)

The FortiGate unit can scan web pages and email messages for instances of banned words. When creating a banned word list, an administrator can indicate either specific words or patterns. Banned words can be expressed as wildcards or regular expressions. Content is automatically blocked if a single instance of a banned word appears. The FortiGate unit includes a pre-defined library of common banned words.

6.

Which statement is correct regarding virus scanning on a FortiGate unit?

Virus scanning is enabled by default. Fortinet Customer Support enables virus scanning remotely for you. Virus scanning must be enabled in a protection profile and the protection profile must be assigned to a firewall policy. Enabling virus scanning in a protection profile enables virus scanning for all traffic flowing
through the FortiGate.

7.

Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

The available actions for URL Filtering are Allow and Block. Multiple URL Filter lists can be added to a single Web filter profile. A FortiGuard Web Filtering Override match will override a block action in the URL filter list. The available actions for URL Filtering are Allow, Block and Exempt.

8.

Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

The FortiGate unit can filter URLs based on patterns using text and regular expressions. The available actions for URL Filtering are Allow and Block. Multiple URL Filter lists can be added to a single Web filter profile. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

9.

Which of the following Regular Expression patterns will make the term bad language case insensitive?

[bad language] /bad language/i i/bad language/ "bad language"Real 31
Fortinet FCNSA.v5 Exam /bad language/c

10.

SSL content inspection is enabled on the FortiGate unit. Which of the following steps is required to prevent a user from being presented with a web browser warning when accessing an SSL- encrypted website?

The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the users workstation. Disable the strict server certificate check in the web browser under Internet Options. Enable transparent proxy mode on the FortiGate unit. Enable NTLM authentication on the FortiGate unit. NTLM authentication suppresses the certificate warning messages in the web browser.

Fortinet Certified Network Security Administrator Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Certified Network Security Administrator Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner