PDF Version DemoFortinet FCNSP Exam Overview:
| Certification Vendor: | Fortinet |
|---|---|
| Exam Name: | Fortinet Certified Network Security Professional (FCNSP v4.2) Exam |
| Exam Number: | FCNSP v4.2 |
| Exam Duration: | 90 minutes |
| Exam Price: | USD 400 |
| Real Exam Qty: | Approximately 30-35 questions |
| Related Certifications: | Fortinet Certified Fundamentals (FCF) Fortinet Certified Expert (FCX) Fortinet Certified Solution Specialist (FCSS) Fortinet Certified Associate (FCA) |
| Certificate Validity Period: | 2 years |
| Exam Format: | Multiple Select, Multiple Choice |
| Available Languages: | English |
| Passing Score: | Pass/fail (exact passing score not publicly disclosed) |
| Recommended Training: | Fortinet Training Institute |
| Exam Registration: | Fortinet Training Institute Certification Program |
| Sample Questions: | Fortinet FCNSP Sample Questions |
| Exam Way: | Online proctored exam or onsite testing through authorized Fortinet exam delivery partners. |
| Pre Condition: | Recommended knowledge of networking fundamentals, TCP/IP protocols, firewall concepts, and FortiGate administration experience. Completion of relevant Fortinet training courses is recommended. |
| Official Syllabus URL: | https://training.fortinet.com/ |
Fortinet FCNSP Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| VPN Technologies | - IPsec VPN configuration and troubleshooting - SSL VPN configuration and management - VPN monitoring and diagnostics |
| Network Security Concepts | - Security architecture concepts - Network security fundamentals - Threats, vulnerabilities, and mitigation techniques |
| FortiGate Configuration and Administration | - Initial configuration and system management - Firewall policies and objects - Administrative access and user management - Interfaces, routing, and connectivity |
| Security Services Configuration | - SSL inspection and content security - Antivirus and anti-malware protection - Web filtering and application control - Intrusion Prevention System (IPS) |
| Logging, Monitoring, and Troubleshooting | - FortiGate logs and diagnostics - FortiAnalyzer integration - Network troubleshooting techniques |
| High Availability and Advanced Networking | - High Availability (HA) configuration - SD-WAN configuration and optimization - Advanced routing features |
Fortinet Certified Network Security Professional (FCNSP v4.2) Sample Questions:
Question #1
Review the IKE debug output for IPsec shown in the Exhibit below.
Which one of the following statements is correct regarding this output?
A. The output is a Phase 1 negotiation.
B. The output captures the Dead Gateway Detection packets.
C. The output captures the Dead Peer Detection messages.
D. The output is a Phase 2 negotiation.
Question #2
Which of the following represents the method used on a FortiGate unit running FortiOS version 4.2 to apply traffic shaping to P2P traffic, such as BitTorrent?
A. Define a DLP Rule to match against BitTorrent traffic and include the rule in a DLP Sensor with Traffic Shaping enabled.
B. Enable the Shape option in a Firewall policy with a Service set to BitTorrent.
C. Apply a Traffic Shaper to a BitTorrent entry in an Application Control List.
D. Specify the amount of Rate Limiting to be applied to BitTorrent traffic through the P2P settings of the Firewall Policy Protocol Options.
Question #3
Which of the following Session TTL values will take precedence?
A. The default session TTL specified at the system level
B. Session TTL specified at the system level for that port number
C. Session TTL specified in the matching firewall policy
D. Session TTL dictated by the application control list associated with the matching firewall policy
Question #4
Examine the Exhibits shown below, then answer the question that follows.
Review the following DLP Sensor (Exhibit 1):
Review the following File Filter list for rule #1 (Exhibit 2):
Review the following File Filter list for rule #2 (Exhibit 3):
Review the following File Filter list for rule #3 (Exhibit 4):
An MP3 file is renamed to 'workbook.exe' and put into a ZIP archive. It is then sent through the FortiGate device over HTTP. It is intercepted and processed by the configuration shown in the above Exhibits 1-4.
Assuming the file is not too large for the File scanning threshold, what action will the FortiGate unit take?
A. The file will be detected by rule #3 as an Archive(zip), blocked, and a log entry will be created.
B. Nothing, the file will go undetected.
C. The file will be detected by rule #1 as an 'Audio (mp3)', a log entry will be created and it will be allowed to pass through.
D. The file will be detected by rule #2 as a "*.exe", a log entry will be created and the interface that received the traffic will be brought down.
Question #5
Which of the following DLP actions will always be performed if it is selected?
A. Block
B. Quarantine Interface
C. Archive
D. Ban Sender
E. Quarantine IP Address
F. None
G. Ban
Solutions:
| Question #1 Correct Answer: C | Question #2 Correct Answer: C | Question #3 Correct Answer: D | Question #4 Correct Answer: C | Question #5 Correct Answer: C |
We are confident about the products and aim to help you pass with ease. In case of failure, we will provide a no hassle full money back guarantee for the purchasing fee.
855 Customer Reviews
Quality and ValueITbraindumps Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITbraindumps testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITbraindumps offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.