Fortinet Certified Network Security Administrator (FCNSA.v5) 認定 FCNSA.v5 試験問題:

1. Which of the following items represent the minimum configuration steps an administrator must perform to enable Data Leak Prevention for traffic flowing through the FortiGate unit? (Select all that apply.)

A) Apply one or more DLP rules to a firewall policy.
B) Define one or more DLP rules.
C) Assign a DLP sensor in a firewall policy.
D) Enable DLP globally using the config sys dlp command in the CLI.
E) Apply a DLP sensor to a DoS sensor policy.
F) Define a DLP sensor.

2. What is the FortiGate unit password recovery process?

A) Interupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry.
B) The only way to regain access is to interrupt boot sequence and restore a configuration file for which the password has been modified.
C) Log in through the console port using the maintainer account within several minutes of a reboot.
D) Hold CTRL + break during reboot and reset the admin password.

3. The FortiGate Web Config provides a link to update the firmware in the System > Status window. Clicking this link will perform which of the following actions?

A) It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit.
B) It will present a prompt to allow browsing to the location of the firmware file.
C) It will connect to the Fortinet support site where the appropriate firmware version can be selected.
D) It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.

4. A FortiGate 60 unit is configured for your small office. The DMZ interface is connected to a network containing a web server and email server. The Internal interface is connected to a network containing 10 user workstations and the WAN1 interface is connected to your ISP.
You want to configure firewall policies so that your users can send and receive email messages to the email server on the DMZ network. You also want the email server to be able to retrieve email messages from an email server hosted by your ISP using the POP3 protocol.
Which policies must be created for this communication? (Select all that apply.)

A) DMZ > WAN1
B) WAN1 > DMZ
C) Internal > DMZ
D) WAN1 > Internal
E) DMZ > Internal
F) Internal > WAN1

5. Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.)

A) PKI
B) Local
C) Firewall
D) Directory Service
E) LDAP

質問と回答：