FCNSP.v5 무료 덤프문제 온라인 액세스

An administrator configures a VPN and selects the Enable IPSec Interface Mode option in the phase 1 settings.
Which of the following statements are correct regarding the IPSec VPN configuration?

• A.This VPN cannot be used as part of a hub and spoke topology.
• B.The virtual IPSec interface is automatically created after the phase1 configuration.
• C.To complete the VPN configuration, the administrator must manually create a virtual IPSec interface in Web Config under System > Network.
• D.Routes were automatically created based on the address objects in the firewall policies.
• E.The IPSec policies must be placed at the top of the list.

Which of the following statements is correct regarding the antivirus scanning function on the FortiGate unit?

• A.Antivirus scanning supports grayware protection.
• B.Antivirus scanning provides end-to-end virus protection for client workstations.
• C.Antivirus scanning provides virus protection for the HTTP, Telnet, SMTP, and FTP protocols.
• D.Antivirus scanning supports banned word checking.

Which of the following statements correctly describe Transparent Mode operation? (Select all that apply.)

• A.Permits inline traffic inspection and firewalling without changing the IP scheme of the network.
• B.Ethernet packets are forwarded based on destination MAC addresses NOT IPs.
• C.All interfaces must be on different IP subnets.
• D.The FortiGate unit acts as transparent bridge and routes traffic using Layer-2 forwarding.
• E.The device is transparent to network hosts.

An intermittent connectivity issue is noticed between two devices located behind the FortiGate dmz and internal interfaces. A continuous sniffer trace is run on the FortiGate unit that the administrator will convert into a .cap file for an off-line analysis with a sniffer application.

Given the high volume of global traffic on the network, which of the following CLI commands will best allow the administrator to perform this troubleshooting operation?

• A.diagnose sniffer packet any
• B.diagnose sniffer packet dmz "" 3
• C.diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 3
• D.diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 4

A FortiClient fails to establish a VPN tunnel with a FortiGate unit.
The following information is displayed in the FortiGate unit logs:
msg="Initiator: sent 192.168.11.101 main mode message #1 (OK)"
msg="Initiator: sent 192.168.11.101 main mode message #2 (OK)"
msg="Initiator: sent 192.168.11.101 main mode message #3 (OK)"
msg="Initiator: parsed 192.168.11.101 main mode message #3 (DONE)"
msg="Initiator: sent 192.168.11.101 quick mode message #1 (OK)"
msg="Initiator: tunnel 192.168.1.1/192.168.11.101 install ipsec sa"
msg="Initiator: sent 192.168.11.101 quick mode message #2 (DONE)"
msg="Initiator: tunnel 192.168.11.101, transform=ESP_3DES, HMAC_MD5" msg="Failed to acquire an IP address
Which of the following statements is a possible cause for the failure to establish the VPN tunnel?

• A.The phase 1 configuration on the FortiGate unit uses Aggressive mode while FortiClient uses Main mode.
• B.An IPSec DHCP server is not enabled on the external interface of the FortiGate unit.
• C.There is a mismatch between the FortiGate unit and the FortiClient IP addresses in the phase 2 settings.
• D.There is no IPSec firewall policy configured for the policy-based VPN.