FCNSP 試験問題を無料オンラインアクセス

Based on the web filtering configuration illustrated in the exhibit, which one of the following statements is not a reasonable conclusion?

• A.When a user attempts to access the www.google.com site, the FortiGate unit will not perform web filtering on the content of that site.
• B.Downloaded content from www.google.com will be scanned for viruses if antivirus is enabled.
• C.Users can access both the www.google.com site and the www.fortinet.com site.
• D.When a user attempts to access the www.fortinet.com site, any remaining web filtering will be bypassed.

What is the effect of using CLI "config system session-ttl" to set session_ttl to 1800 seconds?

• A.Sessions can be idle for no more than 1800 seconds.
• B.After a session has been open for 1800 seconds, the FortiGate unit will send a keepalive packet to both client and server.
• C.After 1800 seconds, the end user must reauthenticate.
• D.The maximum length of time a session can be open is 1800 seconds.

In a High Availability cluster operating in Active-Active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a subordinate unit?

• A.Request: Internal Host; Master FortiGate; Slave FortiGate; Master FortiGate; Internet; Web Server
• B.Request: Internal Host; Slave FortiGate; Internet; Web Server
• C.Request: Internal Host; Master FortiGate; Slave FortiGate; Internet; Web Server
• D.Request: Internal Host; Slave FortiGate; Master FortiGate; Internet; Web Server

The following diagnostic output is displayed in the CLI:
diag firewall auth list
policy iD. 9, srC. 192.168.3.168, action: accept, timeout: 13427
user: forticlient_chk_only, group:
flag (80020): auth timeout_ext, flag2 (40): exact group iD. 0, av group: 0
----- 1 listed, 0 filtered -----
Based on this output, which of the following statements is correct?

• A.Firewall policy 9 has endpoint compliance enabled but not firewall authentication.
• B.The client check that is part of an SSL VPN connection attempt failed.
• C.An auth-keepalive value has been enabled.
• D.This user has been associated with a guest profile as evidenced by the group id of 0.

Examine the exhibit shown below then answer the question that follows it.

Within the UTM Proxy Options, the CA certificate Fortinet_CA_SSLProxy defines which of the following:

• A.FortiGate unit's encryption certificate used by the SSL proxy.
• B.FortiGuard's encryption certificate used by the SSL proxy.
• C.FortiGuard's signing certificate used by the SSL proxy.
• D.FortiGate unit's signing certificate used by the SSL proxy.