FCNSP.v5 試験問題を無料オンラインアクセス

The FortiGate Server Authentication Extensions (FSAE) provide a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows Active Directory.
Which of the following statements are correct regarding FSAE in a Windows domain environment when NTLM is not used? (Select all that apply.)

• A.The FSAE Domain Controller Agent will regularly update user logon information on the FortiGate unit.
• B.For non-domain computers, an FSAE client must be installed on the computer to allow FSAE authentication.
• C.An FSAE Domain Controller Agent must be installed on every domain controller.
• D.An FSAE Collector Agent must be installed on every domain controller.
• E.The FSAE Collector Agent will retrieve user information from the Domain Controller Agent and will send the user logon information to the FortiGate unit.

Review the IPsec Phase2 configuration shown in the Exhibit; then answer the question following it.

Which of the following statements are correct regarding this configuration? (Select all that apply).

• A.The sequence number of ESP packets received from the peer will not be checked.
• B.There will be a DH exchange for each re-key.
• C.Quick mode selectors will default to those used in the firewall policy.
• D.The Phase 2 will re-key even if there is no traffic.

Both the FortiGate and FortiAnalyzer units can notify administrators when certain alert conditions are met.
Considering this, which of the following statements is NOT correct?

• A.Both the FortiGate and FortiAnalyzer devices can send alert notifications in the form of an email alert.
• B.Only a FortiAnalyzer device can send the alert notification in the form of a syslog message.
• C.On a FortiGate device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.
• D.On a FortiAnalyzer device, the alert condition is based either on the severity level or on the log type, but not on a combination of the two.

Examine the static route configuration shown below; then answer the question following it.
config router static edit 1 set dst 172.20.1.0 255.255.255.0 set device port1 set gateway 172.11.12.1 set distance 10 set weight 5 next edit 2 set dst 172.20.1.0 255.255.255.0 set blackhole enable set distance 5 set weight 10 next
end
Which of the following statements correctly describes the static routing configuration provided? (Select all that apply.)

• A.Traffic to 172.20.1.0/24 will be shared through both routes.
• B.The FortiGate unit will NOT create a session entry in the session table when the traffic is being routed by the blackhole route.
• C.All traffic to 172.20.1.0/24 will always be dropped by the FortiGate unit.
• D.The FortiGate unit will create a session entry in the session table when the traffic is being routed by the blackhole route.
• E.As long as port1 is up, all the traffic to 172.20.1.0/24 will be routed by the static route number 1. If the interface port1 is down, the traffic will be routed using the blackhole route.

A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the AntiVirus and Email Filter profiles applied to this policy.

What is the correct behavior when the email attachment is detected as a virus by the FortiGate AntiVirus engine?

• A.The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected.
• B.The FortiGate unit will remove the infected file and add a replacement message. Both sender and recipient are notified that the infected file has been removed.
• C.The FortiGate unit will reject the infected email and notify the sender.
• D.The FortiGate unit will reject the infected email and notify both the sender and recipient.