Free Fortinet FCNSP Exam Dumps Questions & Answers

Which of the following statements is correct about how the FortiGate unit verifies username and password during user authentication?

• A.  An administrator can define a local account for which the password must be verified by querying a remote server.
• B.  If authentication fails with a local password, the FortiGate unit will query the authentication server if the local user is configured with both a local password and an authentication server.
• C.  If a remote server is included in a user group, it will be checked before local accounts.
• D.  The FortiGate unit will only attempt to authenticate against Active Directory if Fortinet Server Authentication Extensions are installed and configured.

An administrator logs into a FortiGate unit using an account which has been assigned a super_admin profile. Which of the following operations can this administrator perform?

• A.  They can delete the admin account if the default admin user is not logged in.
• B.  They can delete logged-in users who are also assigned the super_admin access profile.
• C.  They can make changes to the super_admin profile.
• D.  They can view all the system configuration settings but can not make changes.
• E.  They can access configuration options for only the VDOMs to which they have been assigned.

Identify the statement which correctly describes the output of the following command:
diagnose ips anomaly list

• A.  Lists the configured DoS policy.
• B.  Lists the errors captured when compiling the DoS policy.
• C.  List the real-time counters for the configured DoS policy.

Review the configuration for FortiClient IPsec shown in the Exhibit below.

Which of the following statements is correct regarding this configuration?

• A.  The connecting VPN client will connect in web portal mode and no route will be installed
• B.  The connecting VPN client will install a route to the 172.20.1.[1-5] address range
• C.  The connecting VPN client will install a default route
• D.  The connecting VPN client will install a route to a destination corresponding to the STUDENT_INTERNAL address object

Which of the following cannot be used in conjunction with the endpoint compliance check?

• A.  Traffic shaping.
• B.  Any form of firewall policy authentication.
• C.  HTTP Challenge Redirect to a Secure Channel (HTTPS) in the Authentication Settings.
• D.  WAN optimization.