FCNSP.v5 무료 덤프문제 온라인 액세스

Which of the following statements best decribes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

• A.If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.
• B.The proxy sends the file to the server while simultaneously buffering it.
• C.The proxy removes the infected file from the server by sending a delete command on behalf of the client.
• D.The proxy buffers the entire file from the client, only sending the file to the server if the file is clean. One possible consequence of buffering is that the server could time out.

Review the IPsec Phase2 configuration shown in the Exhibit; then answer the question following it.

Which of the following statements are correct regarding this configuration? (Select all that apply).

• A.The Phase 2 will re-key even if there is no traffic.
• B.The sequence number of ESP packets received from the peer will not be checked.
• C.There will be a DH exchange for each re-key.
• D.Quick mode selectors will default to those used in the firewall policy.

An administrator has formed a High Availability cluster involving two FortiGate 310B units.
[Multiple upstream Layer 2 switches] -- [ FortiGate HA Cluster ] -- [ Multiple downstream Layer 2 switches ]
The administrator wishes to ensure that a single link failure will have minimal impact upon the overall throughput of traffic through this cluster.
Which of the following options describes the best step the administrator can take?
The administrator should...

• A.enable monitoring of all active interfaces.
• B.increase the number of FortiGate units in the cluster and configure HA in Active-Active mode.
• C.configure the HA ping server feature to allow for HA failover in the event that a path is disrupted.
• D.set up a full-mesh design which uses redundant interfaces.

In HA, the option Reserve Management Port for Cluster Member is selected as shown in the Exhibit below.

Which of the following statements are correct regarding this setting? (Select all that apply.)

• A.The IP address assigned to this interface must not overlap with the IP address subnet assigned to another interface.
• B.Port7 appears in the routing table.
• C.When connecting to port7 you always connect to the master device.
• D.A gateway address may be configured for port7.
• E.Interface settings on port7 will not be synchronized with other cluster members.

A FortiGate unit is operating in NAT/Route mode and is configured with two Virtual LAN (VLAN) sub-interfaces added to the same physical interface.
Which of the following statements is correct regarding the VLAN IDs in this scenario?

• A.The two VLAN sub-interfaces must have different VLAN IDs.
• B.The two VLAN sub-interfaces can have the same VLAN ID if they are connected to different L2 IEEE 802.1Q compliant switches.
• C.The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.
• D.The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs.