FCNSP 試験問題を無料オンラインアクセス

A DLP rule with an action of Exempt has been matched against traffic passing through the FortiGate unit. Which of the following statements is correct regarding how this transaction will be handled by the FortiGate unit?

• A.Future files whose characteristics match this file will bypass DLP scanning.
• B.The client IP address will be added to a white list.
• C.The traffic matching the DLP rule will bypass antivirus scanning.
• D.Any other matched DLP rules will be ignored with the exception of Archiving.

The following diagnostic output is displayed in the CLI:
diag firewall auth list
policy iD. 9, srC. 192.168.3.168, action: accept, timeout: 13427
user: forticlient_chk_only, group:
flag (80020): auth timeout_ext, flag2 (40): exact group iD. 0, av group: 0
----- 1 listed, 0 filtered -----
Based on this output, which of the following statements is correct?

• A.An auth-keepalive value has been enabled.
• B.This user has been associated with a guest profile as evidenced by the group id of 0.
• C.The client check that is part of an SSL VPN connection attempt failed.
• D.Firewall policy 9 has endpoint compliance enabled but not firewall authentication.

A network administrator needs to implement dynamic route redundancy between a FortiGate unit located in a remote office and a FortiGate unit located in the central office.
The remote office accesses central resources using IPSec VPN tunnels through two different Internet providers.
What is the best method for allowing the remote office access to the resources through the FortiGate unit used at the central office?

• A.Dynamic routing protocols cannot be used over IPSec VPN tunnels.
• B.Use two or more policy-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.
• C.Use two or more route-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.
• D.Use route-based VPNs on the central office FortiGate unit to advertise routes with a dynamic routing protocol and use a policy-based VPN on the remote office with two or more static default routes.

Which of the following statements correctly describes the deepscan option for HTTPS?

• A.When deepscan is disabled, only the web server certificate is inspected; no decryption of content occurs.
• B.With deepscan enabled, archived files will be decompressed before scanning for a more comprehensive file inspection.
• C.Enabling deepscan will perform further checks on the server certificate.
• D.Deepscan is only applicable to mail protocols, where all IP addresses in the header are checked.

Which of the following represents the method used on a FortiGate unit running FortiOS version 4.2 to apply traffic shaping to P2P traffic, such as BitTorrent?

• A.Specify the amount of Rate Limiting to be applied to BitTorrent traffic through the P2P settings of the Firewall Policy Protocol Options.
• B.Define a DLP Rule to match against BitTorrent traffic and include the rule in a DLP Sensor with Traffic Shaping enabled.
• C.Apply a Traffic Shaper to a BitTorrent entry in an Application Control List.
• D.Enable the Shape option in a Firewall policy with a Service set to BitTorrent.