FCNSP 무료 덤프문제 온라인 액세스

Which of the following statements is correct regarding the antivirus scanning function on the FortiGate unit?

• A.Antivirus scanning provides end-to-end virus protection for client workstations.
• B.Antivirus scanning supports grayware protection.
• C.Antivirus scanning provides virus protection for the HTTP, Telnet, SMTP, and FTP protocols.
• D.Antivirus scanning supports banned word checking.

WAN optimization is configured in Active/Passive mode. When will the remote peer accept an attempt to initiate a tunnel?

• A.The attempt will be accepted when the request comes from a known peer and there is a matching WAN optimization passive rule.
• B.The attempt will be accepted when the request comes from a known peer.
• C.The attempt will be accepted when a user on the remote peer accepts the connection request.
• D.The attempt will be accepted when there is a matching WAN optimization passive rule.

A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit.

Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data to the FortiAnalyzer unit?

• A.The FortiGate unit is considered an unregistered device.
• B.The FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the administrator.
• C.The FortiGate unit is being treated as a syslog device and is only permitted to send log data.
• D.The FortiGate unit has insufficient privileges. The administrator should edit the device entry in the FortiAnalyzer and modify the privileges.

An administrator is examining the attack logs and notices the following entry:
device_id=FG100A3907508962 log_id=18432 subtype=anomaly type=ips timestamp=1270017358 pri=alert itime=1270017893 severity=critical src=192.168.1.52 dst=64.64.64.64 src_int=internal serial=0 status=clear_session proto=6 service=http vd=root count=1 src_port=35094 dst_port=80 attack_id=100663402 sensor=protect-servers ref=http://www.fortinet.com/ids/VID100663402 msg="anomaly: tcp_src_session, 2 > threshold 1" policyid=0 carrier_ep=N/A profile=N/A dst_int=N/A user=N/A group=N/A
Based solely upon this log message, which of the following statements is correct?

• A.The number of concurrent connections to destination IP address 64.64.64.64 has exceeded the configured threshold.
• B.This attack was blocked by the HTTP protocol decoder.
• C.This attack was launched against the FortiGate unit itself rather than a host behind the FortiGate unit.
• D.This attack was caught by the DoS sensor "protect-servers".

When viewing the Banned User monitor in Web Config, the administrator notes the entry illustrated in the exhibit.

Which of the following statements is correct regarding this entry?

• A.The entry displays a ban that was triggered by HTTP traffic matching an IPS signature. This client is banned from receiving or sending any traffic through the FortiGate.
• B.This entry displays a ban entry that was added manually by the administrator on June11th.
• C.The entry displays a ban that has been added as a result of traffic triggering a configured DLP rule.
• D.The entry displays a quarantine, which could have been added by either IPS or DLP.