FCNSP.v5 무료 덤프문제 온라인 액세스

Which of the following describes the best custom signature for detecting the use of the word "Fortinet" in chat applications?

• A.F-SBID( --protocol tcp; --flow from_client; --pattern "fortinet"; --no_case; )
• B.F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --
  within 20; --no_case; )
• C.The sample packet trace illustrated in the exhibit provides details on the packet that requires
  detection.
  F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --
  no_case; )
• D.F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --
  within 20; )

An intermittent connectivity issue is noticed between two devices located behind the FortiGate dmz and internal interfaces. A continuous sniffer trace is run on the FortiGate unit that the administrator will convert into a .cap file for an off-line analysis with a sniffer application.

Given the high volume of global traffic on the network, which of the following CLI commands will best allow the administrator to perform this troubleshooting operation?

• A.diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 3
• B.diagnose sniffer packet any "host 192.168.1.100 and host 192.168.10.100 " 4
• C.diagnose sniffer packet dmz "" 3
• D.diagnose sniffer packet any

A DLP rule with an action of Exempt has been matched against traffic passing through the FortiGate unit. Which of the following statements is correct regarding how this transaction will be handled by the FortiGate unit?

• A.Any other matched DLP rules will be ignored with the exception of Archiving.
• B.The traffic matching the DLP rule will bypass antivirus scanning.
• C.Future files whose characteristics match this file will bypass DLP scanning.
• D.The client IP address will be added to a white list.

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121.
Users have been complaining that when downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message.
Which of the following statements represents the best solution to this problem?

• A.Disable any protection profiles being applied to FTP traffic.
• B.Create a new session helper for the FTP service monitoring port 2121.
• C.Enable the ANY service in the firewall policies for both incoming and outgoing traffic.
• D.Place the client and server interface in the same zone and enable intra-zone traffic.

An administrator configures a VPN and selects the Enable IPSec Interface Mode option in the phase 1 settings.
Which of the following statements are correct regarding the IPSec VPN configuration?

• A.The IPSec policies must be placed at the top of the list.
• B.To complete the VPN configuration, the administrator must manually create a virtual IPSec interface in Web Config under System > Network.
• C.The virtual IPSec interface is automatically created after the phase1 configuration.
• D.This VPN cannot be used as part of a hub and spoke topology.
• E.Routes were automatically created based on the address objects in the firewall policies.