Free Fortinet FCNSP Exam Dumps Questions & Answers

What advantages are there in using a fully Meshed IPSec VPN configuration instead of a hub and spoke set of IPSec tunnels?

• A.  Using a full mesh topology provides stronger encryption.
• B.  Full mesh topology is the most fault-tolerant configuration.
• C.  Using a hub and spoke topology is required to achieve full redundancy.
• D.  Using a full mesh topology simplifies configuration.

Which of the following report templates must be used when scheduling report generation?

• A.  Data Filter Template
• B.  Chart Template
• C.  Output Template
• D.  Layout Template

An administrator wishes to generate a report showing Top Traffic by service type, but wants to exclude SMTP traffic from the report.
Which of the following statements best describes how to do this?

• A.  When editing the chart, uncheck mlog to indicate that Mail Filtering data is being excluded when generating the chart.
• B.  Add the following entry to the Generic Field section of the Data Filter: service="!smtp".
• C.  In the Service field of the Data Filter, type 25/smtp and select the NOT checkbox.
• D.  When editing the chart, enter 'dns' in the Exclude Service field.

Review the IKE debug output for IPsec shown in the Exhibit below.

Which one of the following statements is correct regarding this output?

• A.  The output captures the Dead Gateway Detection packets.
• B.  The output is a Phase 1 negotiation.
• C.  The output is a Phase 2 negotiation.
• D.  The output captures the Dead Peer Detection messages.

Which of the following statements are correct about the HA diag command diagnose sys ha reset-uptime? (Select all that apply.)

• A.  The device this command is executed on is likely to switch from master to slave status if master override is enabled.
• B.  The device this command is executed on is likely to switch from master to slave status if master override is disabled.
• C.  This command resets the uptime variable used in the HA algorithm so it may cause a new master to become elected.
• D.  This command has no impact on the HA algorithm.