FCNSP 無料問題集「Fortinet Certified Network Security Professional (FCNSP v4.2)」

（A）Schedule Template

（B）Layout Template

（C）Output Template

（D）Data Filter Template

（A）OSPF Hello packets will only be sent on interfaces configured with the IP addresses 172.16.1.1 and 172.16.1.2.

（B）OSPF Hello packets will be sent on all interfaces of the FortiGate device.

（C）OSPF Hello packets will be sent on all interfaces configured with an address matching the 10.0.1.0/24 and 172.16.0.0/12 networks.

（D）OSPF Hello packets are not sent on point-to-point networks.

（A）Use two or more policy-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.

（B）Use route-based VPNs on the central office FortiGate unit to advertise routes with a dynamic routing protocol and use a policy-based VPN on the remote office with two or more static default routes.

（C）Use two or more route-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.

（D）Dynamic routing protocols cannot be used over IPSec VPN tunnels.

（A）FortiClient Check

（B）Network Admission Control

（C）Anti-Virus File-Type Blocking

（D）Data Leak Prevention

（A）Only a FortiAnalyzer device can send the alert notification in the form of a syslog message.

（B）On a FortiAnalyzer device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.

（C）On a FortiGate device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.

（D）Both the FortiGate and FortiAnalyzer devices can send alert notifications in the form of an email alert.

（A）All interfaces must be on different IP subnets.

（B）Permits inline traffic inspection and firewalling without changing the IP scheme of the network.

（C）The FortiGate unit acts as transparent bridge and routes traffic using Layer-2 forwarding.

（D）Ethernet packets are forwarded based on destination MAC addresses NOT IPs.

（E）The device is transparent to network hosts.

（A）Organizational Unit

（B）Organization

（C）Validity

（D）Common Name

（E）Serial Number

（A）They can delete the admin account if the default admin user is not logged in.

（B）They can view all the system configuration settings but can not make changes.

（C）They can delete logged-in users who are also assigned the super_admin access profile.

（D）They can access configuration options for only the VDOMs to which they have been assigned.

（E）They can make changes to the super_admin profile.

（A）The maximum length of time a session can be open is 1800 seconds.

（B）After 1800 seconds, the end user must reauthenticate.

（C）After a session has been open for 1800 seconds, the FortiGate unit will send a keepalive packet to both client and server.

（D）Sessions can be idle for no more than 1800 seconds.

（A）The web cache sends an "I see you" message which is captured by the FortiGate unit.

（B）The FortiGate unit polls all globally-defined web cache servers at a regular intervals.

（C）The FortiGate unit receives periodic "Here I am" messages from the web cache.

（D）The FortiGate using uses the health check monitor to verify the availability of a web cache server.