FCNSP.v5 無料問題集「Fortinet Certified Network Security Professional (FCNSP.v5)」

（A）Use two or more policy-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.

（B）Use route-based VPNs on the central office FortiGate unit to advertise routes with a dynamic routing protocol and use a policy-based VPN on the remote office with two or more static default routes.

（C）Use two or more route-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.

（D）Dynamic routing protocols cannot be used over IPSec VPN tunnels.

（A）If authentication fails with a local password, the FortiGate unit will query the authentication server if the local user is configured with both a local password and an authentication server.

（B）The FortiGate unit will only attempt to authenticate against Active Directory if Fortinet Server Authentication Extensions are installed and configured.

（C）An administrator can define a local account for which the password must be verified by querying a remote server.

（D）If a remote server is included in a user group, it will be checked before local accounts.

（A）VDOMs share firmware versions, as well as antivirus and IPS databases.

（B）Only administrative users with a 'super_admin' profile will be able to enter multiple VDOMs to make configuration changes.

（C）A management VDOM handles SNMP, logging, alert email, and FDN-based updates.

（D）VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units.

（A）The priority is 0, which means that the route will remain inactive.

（B）The static route configuration is missing the distance setting.

（C）The subnet 172.20.1.0/24 is overlapped with the subnet of one static route that is already in the routing table (172.20.0.0/16), so, we need to enable allow-subnet-overlap first.

（D）The 'gateway' IP address is NOT in the same subnet as the IP address of port1.

（A）The BGP local AS number must be the same as the OSPF area number of the routes learned that need to be redistributed into BGP.

（B）By design, BGP cannot redistribute routes learned through OSPF.

（C）The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Autonomous System Boundary Router (ASBR).

（D）At a minimum, the network administrator needs to enable Redistribute OSPF in the BGP settings.

（E）The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Area Border Router (ABR).

（A）Ban

（B）None

（C）Quarantine IP Address

（D）Block

（E）Quarantine Interface

（F）Archive

（G）Ban Sender

（A）At a minimum, the network administrator needs to enable Redistribute Default in the OSPF Advanced Options.

（B）At a minimum, the network administrator needs to enable Redistribute RIP in the OSPF Advanced Options.

（C）The FortiGate unit will automatically announce all routes learned only through RIP v2 to its OSPF neighbors.

（D）The FortiGate unit will automatically announce all routes learned through RIP v1 or v2 to its OSPF neighbors.

（E）The network administrator needs to configure a RIP to OSPF announce policy as part of the RIP settings.

（A）When editing the chart, enter 'dns' in the Exclude Service field.

（B）In the Service field of the Data Filter, type 25/smtp and select the NOT checkbox.

（C）Add the following entry to the Generic Field section of the Data Filter: service="!smtp".

（D）When editing the chart, uncheck mlog to indicate that Mail Filtering data is being excluded when generating the chart.

（A）Displays a listing of all connected FSSO Collector Agents.

（B）Monitors communications between the FSSO Collector Agent and FortiGate unit.

（C）Lists all DC Agents installed on all Domain Controllers.

（D）Displays which users are currently logged on using FSSO.

（A）set a unique session-ttl for select applications.

（B）check which applications are installed on workstations attempting to access the network.

（C）customize application types in a similar way to adding custom IPS signatures.

（D）enable AV scanning per application rather than per policy.