Fortinet fortinet certified network security administrator

QUESTION NO: 1
Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

A. A FortiGuard Web Filtering Override match will override a block action in the URL filter list. B. The available actions for URL Filtering are Allow and Block. C. The FortiGate unit can filter URLs based on patterns using text and regular expressions. D. Multiple URL Filter lists can be added to a single Web filter profile.

Correct Answer: C

QUESTION NO: 2
Which of the following items represent the minimum configuration steps an administrator must perform to enable Data Leak Prevention for traffic flowing through the FortiGate unit? (Select all that apply.)

A. Define one or more DLP rules. B. Apply a DLP sensor to a DoS sensor policy. C. Assign a DLP sensor in a firewall policy. D. Enable DLP globally using the config sys dlp command in the CLI. E. Apply one or more DLP rules to a firewall policy. F. Define a DLP sensor.

Correct Answer: A,C,F

QUESTION NO: 3
Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.
An administrator must assign a set of UTM features to a group of users.
Which of the following is the correct method for doing this?

A. Enable a set of unique UTM features under "Edit User Group". B. The administrator must apply the UTM features directly to a user object. C. When defining the UTM objects, the administrator must list the user groups which will use the UTM object. D. The administrator must enable the UTM features in an identify-based policy applicable to the user group.

Correct Answer: D

QUESTION NO: 4
Which of the following options can you use to update the virus definitions on a FortiGate unit? (Select all that apply.)

A. Scheduled update B. FTP update C. Push update D. Manual update

Correct Answer: A,C,D

QUESTION NO: 5
SSL content inspection is enabled on the FortiGate unit. Which of the following steps is required to prevent a user from being presented with a web browser warning when accessing an SSL-encrypted website?

A. Enable transparent proxy mode on the FortiGate unit. B. The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the user's workstation. C. Disable the strict server certificate check in the web browser under Internet Options. D. Enable NTLM authentication on the FortiGate unit. NTLM authentication suppresses the certificate warning messages in the web browser.

Correct Answer: B

QUESTION NO: 6
CORRECT TEXT
In addition to AntiVirus services, the FortiGuard Subscription Services provide IPS, Web Filtering, and ___________ services.

Correct Answer:

QUESTION NO: 7
Which of the following email spam filtering features is not supported on a FortiGate unit?

A. Banned word B. HELO DNS lookup C. Multipurpose Internet MailExtensions (MIME) header check D. Email quarantine

Correct Answer: D

QUESTION NO: 8
The FortiGate Web Config provides a link to update the firmware in the System > Status window.
Clicking this link will perform which of the following actions?

A. It will present a prompt to allow browsing to the location of the firmware file. B. It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit. C. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit. D. It will connect to the Fortinet support site where the appropriate firmware version can be selected.

Correct Answer: A

Fortinet fortinet certified network security administrator - FCNSA Exam Questions