Fortinet Certified Network Security Professional (FCNSP.v5)의 출제 기준은 시험 주관사의 정책에 따라 수시로 조정됩니다. Fast2test은 2026년에도 FCNSP.v5 연습문제를 꾸준히 검토하고 갱신하여, 120문항 전체가 최신 시험 기준을 반영하도록 관리하고 있습니다.

Fortinet FCNSP.v5 시험 개요:

Fortinet FCNSP.v5 시험 요강 주제:

Fortinet Certified Network Security Professional (FCNSP.v5)에 대해 수험생이 가장 많이 묻는 질문

최신 Fortinet Certification FCNSP.v5 무료샘플문제

문제 #1

The following diagnostic output is displayed in the CLI:
diag firewall auth list
policy iD. 9, srC. 192.168.3.168, action: accept, timeout: 13427
user: forticlient_chk_only, group:
flag (80020): auth timeout_ext, flag2 (40): exact group iD. 0, av group: 0
----- 1 listed, 0 filtered -----
Based on this output, which of the following statements is correct?

A. Firewall policy 9 has endpoint compliance enabled but not firewall authentication.
B. The client check that is part of an SSL VPN connection attempt failed.
C. This user has been associated with a guest profile as evidenced by the group id of 0.
D. An auth-keepalive value has been enabled.

문제 #2

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121.
Users have been complaining that when downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message.
Which of the following statements represents the best solution to this problem?

A. Disable any protection profiles being applied to FTP traffic.
B. Place the client and server interface in the same zone and enable intra-zone traffic.
C. Create a new session helper for the FTP service monitoring port 2121.
D. Enable the ANY service in the firewall policies for both incoming and outgoing traffic.

문제 #3

An intermittent connectivity issue is noticed between two devices located behind the FortiGate dmz and internal interfaces. A continuous sniffer trace is run on the FortiGate unit that the administrator will convert into a .cap file for an off-line analysis with a sniffer application.

Given the high volume of global traffic on the network, which of the following CLI commands will best allow the administrator to perform this troubleshooting operation?

A. diagnose sniffer packet dmz "" 3
B. diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 4
C. diagnose sniffer packet any
D. diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 3

문제 #4

Review the IKE debug output for IPsec shown in the Exhibit below.

Which one of the following statements is correct regarding this output?

A. The output captures the Dead Gateway Detection packets.
B. The output is a Phase 2 negotiation.
C. The output captures the Dead Peer Detection messages.
D. The output is a Phase 1 negotiation.

문제 #5

Examine the static route configuration shown below; then answer the question following it.
config router static edit 1 set dst 172.20.1.0 255.255.255.0 set device port1 set gateway 172.11.12.1 set distance 10 set weight 5 next edit 2 set dst 172.20.1.0 255.255.255.0 set blackhole enable set distance 5 set weight 10 next
end
Which of the following statements correctly describes the static routing configuration provided? (Select all that apply.)

A. The FortiGate unit will create a session entry in the session table when the traffic is being routed by the blackhole route.
B. The FortiGate unit will NOT create a session entry in the session table when the traffic is being routed by the blackhole route.
C. As long as port1 is up, all the traffic to 172.20.1.0/24 will be routed by the static route number 1. If the interface port1 is down, the traffic will be routed using the blackhole route.
D. All traffic to 172.20.1.0/24 will always be dropped by the FortiGate unit.
E. Traffic to 172.20.1.0/24 will be shared through both routes.

질문과 대답: