Fortinet Certified Network Security Professional

Question - 45 Maximum mark : - 85

Home
All Exams
Fortinet Certified Network Security Professional Online Practice Exams
Fortinet Certified Network Security Professional

The FortiGate Server Authentication Extensions (FSAE) provide a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows Active Directory. Which of the following statements are correct regarding FSAE in a Windows domain environment when NTLM is not used? (Select all that apply.)

An FSAE Collector Agent must be installed on every domain controller. An FSAE Domain Controller Agent must be installed on every domain controller. The FSAE Domain Controller Agent will regularly update user logon information on the FortiGate unit. The FSAE Collector Agent will retrieve user information from the Domain Controller Agent and will send the user logon information to the FortiGate unit. For non-domain computers, an FSAE client must be installed on the computer to allow FSAE authentication.

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Bob wants to send Alice a file that is encrypted using public key cryptography. Which of the following statements is correct regarding the use of public key cryptography in this scenario?

Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file. ✘ Bob will use his public key to encrypt the file and Alice will use Bobs private key to decrypt the file. ✘ Bob will use Alices public key to encrypt the file and Alice will use her private key to decrypt the file. ✘ Bob will use his public key to encrypt the file and Alice will use her private key to decrypt the file. ✔ Bob will use Alices public key to encrypt the file and Alice will use Bobs public key to decrypt the file. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following statements is correct regarding the antivirus scanning function on the FortiGate unit?

Antivirus scanning provides end-to-end virus protection for client workstations. ✘ Antivirus scanning provides virus protection for the HTTP, Telnet, SMTP, and FTP protocols. ✘ Antivirus scanning supports banned word checking. ✘ Antivirus scanning supports grayware protection. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following describes the best custom signature for detecting the use of the word Fortinet in chat applications?

The sample packet trace illustrated in the exhibit provides details on the packet that requires detection.
F-SBID( --protocol tcp; --flow from_client; --pattern X-MMS-IM-Format; --pattern fortinet; -- no_case; ) ✘ F-SBID( --protocol tcp; --flow from_client; --pattern fortinet; --no_case; ) ✘ F-SBID( --protocol tcp; --flow from_client; --pattern X-MMS-IM-Format; --pattern fortinet; -- within 20; --no_case; ) ✘ F-SBID( --protocol tcp; --flow from_client; --pattern X-MMS-IM-Format; --pattern fortinet; -- within 20; ) ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

An administrator is examining the attack logs and notices the following entry: type=ips subtype=signature pri=alert vd=root serial=1995 attack_id=103022611 src=69.45.64.22 dst=192.168.1.100 src_port=80 dst_port=4887 src_int=wlan dst_int=internal status=detected proto=6 service=4887/tcp user=N/A group=N/A msg=web_client: IE.IFRAME.BufferOverflow.B Based on the information displayed in this entry, which of the following statements are correct? (Select all that apply.)

This is an HTTP server attack. The attack was detected and blocked by the FortiGate unit. The attack was against a FortiGate unit at the 192.168.1.100 IP address. The attack was detected and passed by the FortiGate unit.

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

An administrator is examining the attack logs and notices the following entry:
device_id=FG100A3907508962 log_id=18432 subtype=anomaly type=ips timestamp=1270017358 pri=alert itime=1270017893 severity=critical src=192.168.1.52
dst=64.64.64.64 src_int=internal serial=0 status=clear_session proto=6 service=http vd=root count=1 src_port=35094 dst_port=80 attack_id=100663402
sensor=protect-servers ref=http://www.fortinet.com/ids/VID100663402 msg="anomaly: tcp_src_session, 2 > threshold 1" policyid=0 carrier_ep=N/A profile=N/A
dst_int=N/A user=N/A group=N/A
Based solely upon this log message, which of the following statements is correct?

This attack was blocked by the HTTP protocol decoder. ✘ This attack was caught by the DoS sensor protect-servers. ✘ This attack was launched against the FortiGate unit itself rather than a host behind the FortiGate unit. ✘ The number of concurrent connections to destination IP address 64.64.64.64 has exceeded the configured threshold. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following items are considered to be advantages of using the application control features on the FortiGate unit? Application control allows an administor to:

set a unique session-ttl for select applications. ✘ customize application types in a similar way to adding custom IPS signatures. ✘ check which applications are installed on workstations attempting to access the network. ✘ enable AV scanning per application rather than per policy. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following features could be used by an administrator to block FTP uploads while still allowing FTP downloads?

Anti-Virus File-Type Blocking ✘ Data Leak Prevention ✘ Network Admission Control ✘ FortiClient Check ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

An organization wishes to protect its SIP Server from call flooding attacks. Which of the following configuration changes can be performed on the FortiGate unit to fulfill this requirement?

Apply an application control list which contains a rule for SIP and has the Limit INVITE Request option configured. ✘ Enable Traffic Shaping for the appropriate SIP firewall policy. ✘ Reduce the session time-to-live value for the SIP protocol by running the configure system session-ttl CLI command. ✘ Run the set udp-idle-timer CLI command and set a lower time value. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

Which spam filter is not available on a FortiGate device?

Sender IP reputation database ✘ URLs included in the body of known SPAM messages. ✘ Email addresses included in the body of known SPAM messages. ✘ Spam object checksums ✔ Spam grey listing ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Fortinet Certified Network Security Professional

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner