Fortinet Certified Network Security Professional (FCNSP v4.2) Sample Questions:

1. What is the effect of using CLI "config system session-ttl" to set session_ttl to 1800 seconds?

A) After 1800 seconds, the end user must reauthenticate.
B) Sessions can be idle for no more than 1800 seconds.
C) The maximum length of time a session can be open is 1800 seconds.
D) After a session has been open for 1800 seconds, the FortiGate unit will send a keepalive packet to both client and server.

2. If Open Shortest Path First (OSPF) has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through OSPF need to be announced by Border Gateway Protocol (BGP)?

A) The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Autonomous System Boundary Router (ASBR).
B) At a minimum, the network administrator needs to enable Redistribute OSPF in the BGP settings.
C) By design, BGP cannot redistribute routes learned through OSPF.
D) The BGP local AS number must be the same as the OSPF area number of the routes learned that need to be redistributed into BGP.
E) The FortiGate unit will automatically announce all routes learned through OSPF to its BGP peers if the FortiGate unit is configured as an OSPF Area Border Router (ABR).

3. Which of the following is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying the FortiGate unit?

A) Packet encryption
B) Running SNMP service on a non-standard port is possible
C) SNMP access limits through access lists
D) MIB-based report uploads

4. A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit.

Which of the following statements are true if the network administrator wants to route traffic between all the VDOMs? (Select all that apply.)

A) Inter-VDOM routing is automatically provided if all the subnets that need to be routed are locally attached.
B) The administrator should configure inter-VDOM links to avoid using external interfaces and routers.
C) This configuration requires the use of an external router.
D) As each VDOM has an independant routing table, routing rules need to be set (for example, static routing, OSPF) in each VDOM to route traffic between VDOMs.
E) As with all FortiGate unit interfaces, firewall policies must be in place for traffic to be allowed to pass through any interface, including inter-VDOM links. This provides the same level of security internally as externally.

5. If Routing Information Protocol (RIP) version 1 or version 2 has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through RIP need to be advertised into Open Shortest Path First (OSPF)?

A) The FortiGate unit will automatically announce all routes learned through RIP v1 or v2 to its OSPF neighbors.
B) At a minimum, the network administrator needs to enable Redistribute Default in the OSPF Advanced Options.
C) At a minimum, the network administrator needs to enable Redistribute RIP in the OSPF Advanced Options.
D) The network administrator needs to configure a RIP to OSPF announce policy as part of the RIP settings.
E) The FortiGate unit will automatically announce all routes learned only through RIP v2 to its OSPF neighbors.

Solutions: