FCNSP.v5 試験問題を無料オンラインアクセス

If Open Shortest Path First (OSPF) has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through OSPF need to be announced by Border Gateway Protocol (BGP)?

• A.At a minimum, the network administrator needs to enable Redistribute OSPF in the BGP settings.
• B.The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Autonomous System Boundary Router (ASBR).
• C.The BGP local AS number must be the same as the OSPF area number of the routes learned that need to be redistributed into BGP.
• D.By design, BGP cannot redistribute routes learned through OSPF.
• E.The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Area Border Router (ABR).

Identify the statement which correctly describes the output of the following command:
diagnose ips anomaly list

• A.List the real-time counters for the configured DoS policy.
• B.Lists the configured DoS policy.
• C.Lists the errors captured when compiling the DoS policy.

When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search option.
What is a valid reason for using the Full Search option, instead?

• A.A quick search only searches data received within the last 24 hours.
• B.The search items you are looking for are not contained in indexed log fields.
• C.You want the search to include the FortiAnalyzer's local logs.
• D.You want the search to include content archive data as well.

In the case of TCP traffic, which of the following correctly describes the routing table lookups performed by a FortiGate unit when searching for a suitable gateway?

• A.A look-up is always done each time a packet arrives, from either the server or the client side.
• B.A look-up is done when the first packet coming from the client (SYN) arrives, and a second is performed when the first packet coming from the server (SYNC/ACK) arrives.
• C.A look-up is done only when the first packet coming from the client (SYN) arrives.
• D.A look-up is done only during the TCP 3-way handshake (SYNC, SYNC/ACK, ACK).

With FSSO, a domain user could authenticate either against the domain controller running the Collector Agent and Domain Controller Agent, or a domain controller running only the Domain Controller Agent.
If you attempt to authenticate with the Secondary Domain Controller running only the Domain Controller Agent, which of the following statements are correct? (Select all that apply.)

• A.The FortiGate unit receives the user information from the Domain Controller Agent of the Secondary Controller.
• B.The login event is sent to the Collector Agent.
• C.The Collector Agent performs the DNS lookup for the authenticated client's IP address.
• D.The user cannot be authenticated with the FortiGate device in this manner because each Domain Controller Agent requires a dedicated Collector Agent.