FCNSP 試験問題を無料オンラインアクセス

Which of the following statements are correct regarding Application Control?

• A.Application Control can be applied to SSL encrypted traffic.
• B.Application Control cannot be applied to SSL encrypted traffic.
• C.Application Control is based on the AV engine.
• D.Application Control is based on the IPS engine.

Based on the web filtering configuration illustrated in the exhibit, which one of the following statements is not a reasonable conclusion?

• A.When a user attempts to access the www.google.com site, the FortiGate unit will not perform web filtering on the content of that site.
• B.Users can access both the www.google.com site and the www.fortinet.com site.
• C.Downloaded content from www.google.com will be scanned for viruses if antivirus is enabled.
• D.When a user attempts to access the www.fortinet.com site, any remaining web filtering will be bypassed.

Review the IPsec Phase2 configuration shown in the Exhibit; then answer the question following it.

Which of the following statements are correct regarding this configuration? (Select all that apply).

• A.The Phase 2 will re-key even if there is no traffic.
• B.The sequence number of ESP packets received from the peer will not be checked.
• C.Quick mode selectors will default to those used in the firewall policy.
• D.There will be a DH exchange for each re-key.

Which spam filter is not available on a FortiGate device?

• A.URLs included in the body of known SPAM messages.
• B.Sender IP reputation database
• C.Spam grey listing
• D.Spam object checksums
• E.Email addresses included in the body of known SPAM messages.

Which of the following statements are correct regarding the configuration of a FortiGate unit as an SSL VPN gateway? (Select all that apply.)

• A.The specific routes needed to access internal resources through an SSL VPN connection in tunnel mode from the client computer are defined in the routing widget associated with the SSL VPN portal.
• B.The portal settings specify whether the connection will operate in web-only or tunnel mode.
• C.Tunnel mode can only be used if the SSL VPN user groups have at least one Host Check option enabled.
• D.In order to apply a portal to a user, that user must belong to an SSL VPN user group.