Fortinet Certified Network Security Professional (FCNSP v4.2) Sample Questions:

1. Examine the following log message for IPS and identify the valid responses below. (Select all that apply.)
2012-07-01 09:54:28 oid=2 log_id=18433 type=ips subtype=anomaly pri=alert vd=root severity="critical" src="192.168.3.168" dst="192.168.3.170" src_int="port2" serial=0 status="detected" proto=1 service="icmp" count=1 attack_name="icmp_flood" icmp_id="0xa8a4" icmp_type="0x08" icmp_code="0x00" attack_id=16777316 sensor="1" ref="http://www.fortinet.com/ids/VID16777316" msg="anomaly: icmp_flood, 51 > threshold 50"

A) The attack was detected and blocked.
B) The target is 192.168.3.168.
C) The target is 192.168.3.170.
D) The attack was TCP based.
E) The attack was detected only.

2. With FSSO, a domain user could authenticate either against the domain controller running the Collector Agent and Domain Controller Agent, or a domain controller running only the Domain Controller Agent.
If you attempt to authenticate with the Secondary Domain Controller running only the Domain Controller Agent, which of the following statements are correct? (Select all that apply.)

A) The user cannot be authenticated with the FortiGate device in this manner because each Domain Controller Agent requires a dedicated Collector Agent.
B) The login event is sent to the Collector Agent.
C) The FortiGate unit receives the user information from the Domain Controller Agent of the Secondary Controller.
D) The Collector Agent performs the DNS lookup for the authenticated client's IP address.

3. Which of the following statements is correct regarding the NAC Quarantine feature?

A) With NAC quarantine, files can be quarantined not only as a result of antivirus scanning, but also for other forms of content inspection such as IPS and DLP.
B) If you chose the quarantine action, you must decide whether the quarantine type is NAC quarantine or File quarantine.
C) NAC quarantine does a client check on workstations before they are permitted to have administrative access to FortiGate.
D) NAC quarantine allows administrators to isolate clients whose network activity poses a security risk.

4. Identify the correct properties of a partial mesh VPN deployment:

A) Some locations are reached via a hub location.
B) VPN tunnels interconnect between every single location.
C) VPN tunnels are not configured between every single location.
D) There are no hub locations in a partial mesh.

5. Which of the following is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying the FortiGate unit?

A) Packet encryption
B) MIB-based report uploads
C) Running SNMP service on a non-standard port is possible
D) SNMP access limits through access lists

Solutions: