Free Fortinet FCNSA.v5 Exam Dumps Questions & Answers

Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

• A.  If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.
• B.  The proxy sends the file to the server while simultaneously buffering it.
• C.  If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client.
• D.  The proxy will not allow a file to be transmitted in multiple streams simultaneously.

You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You have chosen to use Interface Mode when configuring the VPN tunnel and you want users from either side to be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate unit already has a default route.
Which of the following configuration steps are required to achieve these objectives? (Select all that apply.)

• A.  Create a phase 1 definition.
• B.  Add a route for the remote subnet.
• C.  Create one firewall policy.
• D.  Create two firewall policies.
• E.  Add a route for incoming traffic.
• F.  Create a phase 2 definition.

The FortiGate Web Config provides a link to update the firmware in the System > Status window. Clicking this link will perform which of the following actions?

• A.  It will automatically connect to the Fortinet support site to download the most recent firmware version for the FortiGate unit.
• B.  It will connect to the Fortinet support site where the appropriate firmware version can be selected.
• C.  It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.
• D.  It will present a prompt to allow browsing to the location of the firmware file.

Which of the following statements correctly describes how a FortiGate unit functions in Transparent mode?

• A.  To manage the FortiGate unit, one of the interfaces must be designated as the management interface. This interface may not be used for forwarding data.
• B.  The FortiGate unit uses private IP addresses on the internal network but hides them using address translation.
• C.  An IP address is used to manage the FortiGate unit but this IP address is not associated with a specific interface.
• D.  The FortiGate unit must use public IP addresses on the internal and external networks.

Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

• A.  The FortiGate unit applies NAT to all traffic.
• B.  The FortiGate unit functions as a router and the firewall function is disabled.
• C.  The FortiGate unit functions as a Layer 3 device.
• D.  The FortiGate unit functions as a Layer 2 device.