Free Fortinet FCNSP.v5 Exam Dumps Questions & Answers

Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.
config router static edit 1 set dst 172.20.168.0 255.255.255.0 set distance 20 set priority 10 set device port1 next edit 2 set dst 172.20.168.0 255.255.255.0 set distance 20 set priority 20 set device port2 next end
Which of the following statements correctly describes the static routing configuration provided above?

• A.  The FortiGate unit will share the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic.
• B.  The FortiGate unit will send all the traffic to 172.20.168.0/24 through port1.
• C.  The FortiGate unit will evenly share the traffic to 172.20.168.0/24 through both routes.
• D.  Only the route that is using port1 will show up in the routing table.

Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of 'diag sys session stat' for the STUDENT device. Exhibit B shows
the command output of 'diag sys session stat' for the REMOTE device. Exhibit A:

Exhibit B:

Given the information provided in the exhibits, which of the following statements are correct? (Select all that apply.)

• A.  Session-pickup is likely to be enabled.
• B.  There is not enough information to determine the cluster mode.
• C.  The cluster mode is definitely Active-Passive.
• D.  STUDENT is likely to be the master device.

Which of the following statements are correct regarding Application Control?

• A.  Application Control can be applied to SSL encrypted traffic.
• B.  Application Control cannot be applied to SSL encrypted traffic.
• C.  Application Control is based on the AV engine.
• D.  Application Control is based on the IPS engine.

Which of the following Session TTL values will take precedence?

• A.  Session TTL specified in the matching firewall policy
• B.  The default session TTL specified at the system level
• C.  Session TTL dictated by the application control list associated with the matching firewall policy
• D.  Session TTL specified at the system level for that port number

The diag sys session list command is executed in the CLI. The output of this command is shown in the exhibit.

Based on the output from this command, which of the following statements is correct?

• A.  This is an ICMP session.
• B.  This is a UDP session.
• C.  This session matches a firewall policy with ID 5.
• D.  This traffic has been authenticated.
• E.  Traffic shaping is being applied to this session.