[2026] Fortinet Certified Network Security Professional (FCNSP.v5)

문제1

Examine the Exhibit shown below; then answer the question following it.

The Vancouver FortiGate unit initially had the following information in its routing table:
S 172.20.0.0/16 [10/0] via 172.21.1.2, port2 C 172.21.0.0/16 is directly connected, port2 C 172.11.11.0/24 is directly connected, port1
Afterwards, the following static route was added:
config router static edit 6 set dst 172.20.1.0 255.255.255.0 set pririoty 0 set device port1 set gateway 172.11.12.1
next end
Since this change, the new static route is NOT showing up in the routing table. Given the information provided, which of the following describes the cause of this problem?

A. The subnet 172.20.1.0/24 is overlapped with the subnet of one static route that is already in the routing table (172.20.0.0/16), so, we need to enable allow-subnet-overlap first.

B. The static route configuration is missing the distance setting.

C. The priority is 0, which means that the route will remain inactive.

D. The 'gateway' IP address is NOT in the same subnet as the IP address of port1.

정답: D

문제2

In Transparent Mode, forward-domain is an attribute of ______________.

A. an interface

B. a virtual domain

C. a firewall policy

D. a static route

정답: A

문제3

If Open Shortest Path First (OSPF) has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through OSPF need to be announced by Border Gateway Protocol (BGP)?

A. The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Autonomous System Boundary Router (ASBR).

B. At a minimum, the network administrator needs to enable Redistribute OSPF in the BGP settings.

C. By design, BGP cannot redistribute routes learned through OSPF.

D. The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Area Border Router (ABR).

E. The BGP local AS number must be the same as the OSPF area number of the routes learned that need to be redistributed into BGP.

정답: B

문제4

An administrator has formed a High Availability cluster involving two FortiGate 310B units.
[Multiple upstream Layer 2 switches] -- [ FortiGate HA Cluster ] -- [ Multiple downstream Layer 2 switches ]
The administrator wishes to ensure that a single link failure will have minimal impact upon the overall throughput of traffic through this cluster.
Which of the following options describes the best step the administrator can take?
The administrator should...

A. increase the number of FortiGate units in the cluster and configure HA in Active-Active mode.

B. set up a full-mesh design which uses redundant interfaces.

C. enable monitoring of all active interfaces.

D. configure the HA ping server feature to allow for HA failover in the event that a path is disrupted.

정답: B

문제5

Which of the following statements correctly describe Transparent Mode operation? (Select all that apply.)

A. The device is transparent to network hosts.

B. Ethernet packets are forwarded based on destination MAC addresses NOT IPs.

C. All interfaces must be on different IP subnets.

D. Permits inline traffic inspection and firewalling without changing the IP scheme of the network.

E. The FortiGate unit acts as transparent bridge and routes traffic using Layer-2 forwarding.

정답: A,B,D,E

문제6

Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of 'diag sys session stat' for the STUDENT device. Exhibit B shows
the command output of 'diag sys session stat' for the REMOTE device. Exhibit A:

Exhibit B:

Given the information provided in the exhibits, which of the following statements are correct? (Select all that apply.)

A. Session-pickup is likely to be enabled.

B. The cluster mode is definitely Active-Passive.

C. There is not enough information to determine the cluster mode.

D. STUDENT is likely to be the master device.

정답: C,D

문제7

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121.
Users have been complaining that when downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message.
Which of the following statements represents the best solution to this problem?

A. Disable any protection profiles being applied to FTP traffic.

B. Place the client and server interface in the same zone and enable intra-zone traffic.

C. Create a new session helper for the FTP service monitoring port 2121.

D. Enable the ANY service in the firewall policies for both incoming and outgoing traffic.

정답: C

문제8

A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit.

Which of the following statements are true if the network administrator wants to route traffic between all the VDOMs? (Select all that apply.)

A. As with all FortiGate unit interfaces, firewall policies must be in place for traffic to be allowed to pass through any interface, including inter-VDOM links. This provides the same level of security internally as externally.

B. This configuration requires the use of an external router.

C. As each VDOM has an independant routing table, routing rules need to be set (for example, static routing, OSPF) in each VDOM to route traffic between VDOMs.

D. The administrator should configure inter-VDOM links to avoid using external interfaces and routers.

E. Inter-VDOM routing is automatically provided if all the subnets that need to be routed are locally attached.

정답: A,C,D

문제9

An administrator is examining the attack logs and notices the following entry:
type=ips subtype=signature pri=alert vd=root serial=1995 attack_id=103022611 src=69.45.64.22 dst=192.168.1.100 src_port=80 dst_port=4887 src_int=wlan dst_int=internal status=detected proto=6 service=4887/tcp user=N/A group=N/A msg=web_client: IE.IFRAME.BufferOverflow.B
Based on the information displayed in this entry, which of the following statements are correct? (Select all that apply.)

A. The attack was against a FortiGate unit at the 192.168.1.100 IP address.

B. The attack was detected and passed by the FortiGate unit.

C. This is an HTTP server attack.

D. The attack was detected and blocked by the FortiGate unit.

정답: A,B

Fortinet Certified Network Security Professional (FCNSP.v5) - FCNSP.v5무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트