[2026] Fortinet fortinet certified network security administrator

문제1

Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

A. The FortiGate unit commonly uses private IP addresses on the internal network but hides them using network address translation.

B. The FortiGate unit must use public IP addresses on both the internal and external networks.

C. The FortiGate unit uses only DHCP-assigned IP addresses on the internal network.

D. The FortiGate unit requires only a single IP address for receiving updates and configuring from a management computer.

정답: A

문제2

A client can create a secure connection to a FortiGate using SSL VPN in web-only mode.
Which one of the following statements is correct regarding the use of web-only mode SSL VPN?

A. A Fortinet-supplied plug-in is required on the web client to use web-only mode SSL VPN.

B. The JAVA run-time environment must be installed on the client to be able to connect to a web-only mode SSL VPN.

C. Web-only mode requires the user to have a web browser that supports 64-bit cipher length.

D. Web-only mode supports SSL version 3 only.

정답: C

문제3

Which of the following pieces of information can be included in the Destination Address field of a firewall policy?

A. A virtual IP address, an actual IP address, and an IP address group.

B. Only an actual IP address.

C. An actual IP address and an IP address group.

D. An IP address pool, a virtual IP address, an actual IP address, and an IP address group.

정답: A

문제4

Caching improves performance by reducing FortiGate unit requests to the FortiGuard server.
Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.)

A. The size of the cache will increase to accomodate any number of cached queries.

B. When the cache is full, the least recently used IP address or URL is deleted from the cache.

C. An administrator can configure the number of seconds to store information in the cache before the FortiGate unit contacts the FortiGuard server again.

D. The cache uses a small portion of the FortiGate system memory.

E. Caching is available for web filtering, antispam, and IPS requests.

정답: B,C,D

문제5

In which order are firewall policies processed on the FortiGate unit?

A. They are processed based on the policy ID number shown in the left hand column of the policy window.

B. They are processed from the top down as they appear in Web Config.

C. They are processed using a policy hierarchy scheme that allows for multiple decision branching.

D. They are processed based on a priority value assigned through the priority column in the policy window.

정답: B

문제6

Which of the following statements are correct regarding URL Filtering on the FortiGate unit? (Select all that apply.)

A. Multiple URL Filter lists can be added to a single protection profile.

B. The FortiGate unit can filter URLs based on patterns using text and regular expressions.

C. The allowed actions for URL Filtering include Allow, Block and Exempt.

D. The allowed actions for URL Filtering are Allow and Block.

E. Any URL accessible by a web browser can be blocked using URL Filtering.

정답: B,C

문제7

A FortiAnalyzer device could use which security method to secure the transfer of log data from FortiGate devices?

A. IPSec

B. SSL

C. direct serial connection

D. S/MIME

정답: A

문제8

CORRECT TEXT
In addition to AntiVirus services, the FortiGuard Subscription Services provide IPS, Web Filtering, and ___________ services.

정답:

Fortinet fortinet certified network security administrator - FCNSA무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트