Fortinet Certified Network Security Professional (FCNSP v4.2) Sample Questions:

1. What is the effect of using CLI "config system session-ttl" to set session_ttl to 1800 seconds?

A) After a session has been open for 1800 seconds, the FortiGate unit will send a keepalive packet to both client and server.
B) After 1800 seconds, the end user must reauthenticate.
C) The maximum length of time a session can be open is 1800 seconds.
D) Sessions can be idle for no more than 1800 seconds.

2. A FortiGate unit is operating in NAT/Route mode and is configured with two Virtual LAN (VLAN) sub-interfaces added to the same physical interface.
Which of the following statements is correct regarding the VLAN IDs in this scenario?

A) The two VLAN sub-interfaces must have different VLAN IDs.
B) The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs.
C) The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.
D) The two VLAN sub-interfaces can have the same VLAN ID if they are connected to different L2 IEEE 802.1Q compliant switches.

3. Which of the following describes the best custom signature for detecting the use of the word "Fortinet" in chat applications?

A) F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --
within 20; )
B) F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --
within 20; --no_case; )
C) The sample packet trace illustrated in the exhibit provides details on the packet that requires
detection.
F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --
no_case; )
D) F-SBID( --protocol tcp; --flow from_client; --pattern "fortinet"; --no_case; )

4. An administrator logs into a FortiGate unit using an account which has been assigned a super_admin profile. Which of the following operations can this administrator perform?

A) They can access configuration options for only the VDOMs to which they have been assigned.
B) They can delete the admin account if the default admin user is not logged in.
C) They can make changes to the super_admin profile.
D) They can delete logged-in users who are also assigned the super_admin access profile.
E) They can view all the system configuration settings but can not make changes.

5. For Data Leak Prevention, which of the following describes the difference between the block and quarantine actions?

A) A block action prevents the transaction. A quarantine action archives the data.
B) A block action prevents the transaction. A quarantine action blocks all future transactions, regardless of the protocol.
C) A block action has a finite duration. A quarantine action must be removed by an administrator.
D) A block action is used for known users. A quarantine action is used for unknown users.

Solutions: