최신 Fortinet Certification FCNSP 무료샘플문제:
1. Review the CLI configuration below for an IPS sensor and identify the correct statements regarding this configuration from the choices below. (Select all that apply.)
config ips sensor edit "LINUX_SERVER" set comment '' set replacemsg-group '' set log enable config entries edit 1 set action default set application all set location server set log enable set log-packet enable set os Linux set protocol all set quarantine none set severity all set status default next end next
end
A) The sensor only filters which IPS signatures to apply to the selected firewall policy.
B) The sensor will reset all connections that match these signatures.
C) The sensor will include a PCAP file with a trace of the matching packets in the log message of any matched signature.
D) The sensor will log all server attacks for all operating systems.
E) The sensor will match all traffic from the address object 'LINUX_SERVER'.
2. When configuring a server load balanced virtual IP, which of the following is the best distribution algorithm to be used in applications where the same physical destination server must be maintained between sessions?
A) Round robin
B) Weighted round robin
C) Static
D) Least connected
3. In which of the following report templates would you configure the charts to be included in the report?
A) Schedule Template
B) Layout Template
C) Output Template
D) Data Filter Template
4. The following diagnostic output is displayed in the CLI:
diag firewall auth list
policy iD. 9, srC. 192.168.3.168, action: accept, timeout: 13427
user: forticlient_chk_only, group:
flag (80020): auth timeout_ext, flag2 (40): exact group iD. 0, av group: 0
----- 1 listed, 0 filtered -----
Based on this output, which of the following statements is correct?
A) An auth-keepalive value has been enabled.
B) Firewall policy 9 has endpoint compliance enabled but not firewall authentication.
C) The client check that is part of an SSL VPN connection attempt failed.
D) This user has been associated with a guest profile as evidenced by the group id of 0.
5. Examine the Exhibit shown below; then answer the question following it.
The Vancouver FortiGate unit initially had the following information in its routing table:
S 172.20.0.0/16 [10/0] via 172.21.1.2, port2 C 172.21.0.0/16 is directly connected, port2 C 172.11.11.0/24 is directly connected, port1
Afterwards, the following static route was added:
config router static edit 6 set dst 172.20.1.0 255.255.255.0 set pririoty 0 set device port1 set gateway 172.11.12.1
next end
Since this change, the new static route is NOT showing up in the routing table. Given the information provided, which of the following describes the cause of this problem?
A) The subnet 172.20.1.0/24 is overlapped with the subnet of one static route that is already in the routing table (172.20.0.0/16), so, we need to enable allow-subnet-overlap first.
B) The static route configuration is missing the distance setting.
C) The priority is 0, which means that the route will remain inactive.
D) The 'gateway' IP address is NOT in the same subnet as the IP address of port1.
질문과 대답:
| 질문 # 1 정답: A,C | 질문 # 2 정답: C | 질문 # 3 정답: B | 질문 # 4 정답: B | 질문 # 5 정답: D |
695 개 고객 리뷰
품질과 가치ITCertKR 의 높은 정확도를 보장하는 최고품질의 덤프는 IT인증시험에 대비하여 제작된것으로서 높은 적중율을 자랑하고 있습니다.
테스트 및 승인ITCertKR 의 덤프는 모두 엘리트한 전문가들이 실제시험문제를 분석하여 답을 작성한 만큼 시험문제의 적중률은 아주 높습니다.
쉽게 시험패스ITCertKR의 테스트 엔진을 사용하여 시험을 준비한다는것은 첫 번째 시도에서 인증시험 패스성공을 의미합니다.
주문하기전 체험ITCertKR의 각 제품은 무료 데모를 제공합니다. 구입하기로 결정하기 전에 덤프샘플문제로 덤프품질과 실용성을 검증할수 있습니다.
