Fortinet FCNSP exam practice questions and answers

If you choose ITCertKing, success is not far away for you. And soon you can get Fortinet certification FCNSP exam certificate. The product of ITCertKing not only can 100% guarantee you to pass the exam, but also can provide you a free one-year update service.

Let me be clear here a core value problem of ITCertKing. All Fortinet exams are very important. In this era of rapid development of information technology, ITCertKing just one of the questions providers. Why do most people to choose ITCertKing ? Because the ITCertKing exam information will be able to help you pass the test. It provides the information which is up to date. With ITCertKing Fortinet FCNSP test questions, you will become full of confidence and not have to worry about the exam. However, it lets you get certified effortlessly.

On ITCertKing website you can free download part of the exam questions and answers about Fortinet certification FCNSP exam to quiz our reliability. ITCertKing's products can 100% put you onto a success away, then the pinnacle of IT is a step closer to you.

ITCertKing provide a good after-sales service for all customers. If you choose to purchase ITCertKing products, ITCertKing will provide you with online service for 24 hours a day and one year free update service, which timely inform you the latest exam information to let you have a fully preparation. We can let you spend a small amount of time and money and pass the IT certification exam at the same time. Selecting the products of ITCertKing to help you pass your first time Fortinet certification FCNSP exam is very cost-effective.

Exam Code: FCNSP
Exam Name: Fortinet (Fortinet Certified Network Security Professional (FCNSP v4.2))
One year free update, No help, Full refund!
Total Q&A: 120 Questions and Answers
Last Update: 2013-10-23

Dear candidates, have you thought to participate in any Fortinet FCNSP exam training courses? In fact, you can take steps to pass the certification. ITCertKing Fortinet FCNSP exam training materials bear with a large number of the exam questions you need, which is a good choice. The training materials can help you pass the certification.

FCNSP Free Demo Download: http://www.itcertking.com/FCNSP_exam.html

NO.1 Which of the following describes the difference between the ban and quarantine actions?
A.A ban action prevents future transactions using the same protocol which triggered the ban. A qarantine
action blocks all future transactions, regardless of the protocol.
B.A ban action blocks the transaction. A quarantine action archives the data.
C.A ban action has a finite duration. A quarantine action must be removed by an administrator.
D.A ban action is used for known users. A quarantine action is used for unknown users.
Answer: A

Fortinet braindump   FCNSP original questions   FCNSP test answers   FCNSP   FCNSP

NO.2 A DLP rule with an action of Exempt has been matched against traffic passing through the FortiGate
unit. Which of the following statements is correct regarding how this transaction will be handled by the
FortiGate unit?
A.Any other matched DLP rules will be ignored with the exception of Archiving.
B.Any other matched DLP rules are ignored.
C.The traffic matching the DLP rule will bypass antivirus scanning.
D.The client IP address will be added to a white list.
Answer: A

Fortinet   FCNSP   FCNSP answers real questions   FCNSP demo   FCNSP exam prep

NO.3 Which of the following statements are correct regarding the antivirus scanning function on the FortiGate
unit?
A.Antivirus scanning can be configured to block certain file types and patterns.
B.Antivirus scanning provides end-to-end virus protection for client workstations.
C.Antivirus scanning provides virus protection for the HTTP, Telnet, SMTP, and FTP protocols.
D.Antivirus scanning supports banned word checking.
E.Antivirus scanning supports grayware protection.
Answer:AE

Fortinet   FCNSP   FCNSP

NO.4 Which of the following items are considered to be advantages of using the application control features
on the FortiGate unit?
A.Application control provides application detection regardless of the port used by the application.
B.Application control allows session-ttl to be customized for specific application types.
C.Application control allows custom application types to be added in a similar way to adding custom IPS
signatures.
D.Application control allows an administrator to check which applications are installed on workstations
attempting to access the network.
Answer: AB

Fortinet   FCNSP practice test   FCNSP   FCNSP

NO.5 Based on the web filtering configuration illustrated in the exhibit, which one of the following statements
is not a reasonable conclusion?
A.Users can access both the www.google.com site and the www.fortinet.com site.
B.When a user attempts to access the www.google.com site, the FortiGate unit will not perform web
filtering on the content of that site.
C.When a user attempts to access the www.fortinet.com site, any remaining web filtering will be
bypassed.
D.Downloaded content from www.google.com will be scanned for viruses if antivirus is enabled.
Answer: B

Fortinet   FCNSP   FCNSP   FCNSP pdf

NO.6 An administrator is examining the attack logs and notices the following entry:
attack_id=100663402 src=192.168.0.79 dst=64.64.64.64 src_port=57133 dst_port=80 interface=port3
src_int=n/a dst_int=n/a status=dropped proto=6 service=http msg="TCP session over limit
Based solely upon this log message, which of the following statements is correct?
A.This attack was blocked by the HTTP protocol decoder.
B.This attack was caught by the DoS sensor.
C.This attack was launched against the FortiGate unit itself rather than a host behind the FortiGate unit.
D.The number of concurrent connections to destination IP address 64.64.64.64 has exceeded the
configured threshold.
Answer: B

Fortinet   FCNSP   FCNSP   FCNSP dumps   FCNSP test

NO.7 Which of the following describes the best custom signature for detecting the use of the word "Fortinet" in
chat applications.?
The sample packet trace illustrated in the exhibit provides details on the packet that requires detection.
A.F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --no_case; )
B.F-SBID( --protocol tcp; --flow from_client; --pattern "fortinet"; --no_case; )
C.F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --within 20;
--no_case; )
D.F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --within
20; )
Answer:A

Fortinet test   FCNSP braindump   FCNSP certification training   FCNSP

NO.8 When viewing the Banned User tab in User Monitor in Web Config, the administrator notes the entry
illustrated in the exhibit. Which of the following statements is correct regarding this entry?
A.The entry displays a ban that has been added as a result of traffic triggering a configured DLP rule.
B.The entry displays a ban that was triggered by HTTP traffic matching an IPS signature. This client is
banned from receiving or sending any traffic through the FortiGate.
C.The entry displays a quarantine, which could have been added by either IPS or DLP.
D.This entry displays a ban entry that was added manually by the administrator on Dec 24th.
Answer: A

Fortinet   FCNSP   FCNSP braindump   FCNSP   FCNSP

NO.9 Which part of an email message exchange is not inspected by the POP3 and IMAP proxies?
A.TCP connection
B.Protocol commands
C.Message headers
D.Message body
Answer: A

Fortinet   FCNSP certification training   FCNSP   FCNSP

NO.10 The transfer of encrypted files or the use of encrypted protocols between users and servers on the
internet can frustrate the efforts of administrators attempting to monitor traffic passing through the
FortiGate unit and ensuring user compliance to corporate rules.
Which of the following items will allow the administrator to control the transfer of encrypted data through
the FortiGate unit?
A.Encrypted protocols can be scanned through the use of the SSL proxy.
B.DLP rules can be used to block the transmission of encrypted files.
C.Firewall authentication can be enabled in the firewall policy, preventing the use of encrypted
communications channels.
D.Application control can be used to monitor the use of encrypted protocols; alerts can be sent to the
administrator through email when the use of encrypted protocols is attempted.
Answer: AB

Fortinet pdf   FCNSP   FCNSP study guide   FCNSP exam

ITCertKing offer the latest 000-N37 exam material and high-quality C_TERP10_65 pdf questions & answers. Our MB5-858 VCE testing engine and VCP5-DCV study guide can help you pass the real exam. High-quality HP5-T01D dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/FCNSP_exam.html