FCNSA.v5 無料問題集「Fortinet Certified Network Security Administrator (FCNSA.v5)」

（A）A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.

（B）Overrides can be allowed by the administrator for a specific period of time.

（C）When requesting an override, the matched user must belong to a user group for which the override capabilty has been enabled.

（D）A web filter profile may only have one user group defined as an override group.

（A）'Port1' or 'Internal' interface will have a DHCP server set up and enabled (on devices that support DHCP Servers).

（B）Default login will always be the username: admin (all lowercase) and no password.

（C）The implicit firewall action is ACCEPT.

（D）'Port1' or 'Internal' interface will have an IP of 192.168.1.99.

（A）operation mode

（B）allowaccess interface settings

（C）profile

（D）local-in policy

（A）Split tunneling can be enabled when using tunnel mode SSL VPN.

（B）Tunnel mode SSL VPN requires the FortiClient software to be installed on the user's computer.

（C）The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.

（D）Users attempting to create a tunnel mode SSL VPN connection must be members of a configured user group on the FortiGate unit.

（E）Software must be downloaded to the web client to be able to use a tunnel mode SSL VPN.

（A）Split tunneling can be enabled when using tunnel mode SSL VPN.

（B）Client software is required to be able to use a tunnel mode SSL VPN.

（C）Users attempting to create a tunnel mode SSL VPN connection must be authenticated by at least one SSL VPN policy.

（D）The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.

（A）Manual update

（B）FTP update

（C）Scheduled update

（D）Push update

（A）Syslog

（B）FortiAnalyzer

（C）LDAP

（D）Local disk and/or memory

（A）210.192.168.3 - 210.192.168.10

（B）All of the above.

（C）210.192.168.1 - 210.192.168.4

（D）172.168.0.1 - 172.168.0.10

（A）An IP address pool.

（B）A virtual IP address.

（C）An FQDN or Geographic value(s).

（D）An actual IP address or an IP address group.

（A）The proxy will not allow a file to be transmitted in multiple streams simultaneously.

（B）If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client.

（C）The proxy sends the file to the server while simultaneously buffering it.

（D）If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.