Free Fortinet FCNSP Exam Dumps Questions & Answers

An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The tunnel will start up for a few seconds, then shut down.
Which of the following statements best describes how to resolve this issue?

• A.This user does not have permission to enable tunnel mode. Make sure that the tunnel mode widget has been added to that user's web portal.
• B.Check the SSL adaptor on the host machine. If necessary, uninstall and reinstall the adaptor from the tunnel mode portal.
• C.This FortiGate unit may have multiple Internet connections. To avoid this problem, use the appropriate CLI command to bind the SSL VPN connection to the original incoming interface.
• D.Make sure that only Internet Explorer is used. All other browsers are unsupported.

Which of the following statements correctly describe Transparent Mode operation? (Select all that apply.)

• A.Ethernet packets are forwarded based on destination MAC addresses NOT IPs.
• B.All interfaces must be on different IP subnets.
• C.Permits inline traffic inspection and firewalling without changing the IP scheme of the network.
• D.The device is transparent to network hosts.
• E.The FortiGate unit acts as transparent bridge and routes traffic using Layer-2 forwarding.

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121.
Users have been complaining that when downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message.
Which of the following statements represents the best solution to this problem?

• A.Enable the ANY service in the firewall policies for both incoming and outgoing traffic.
• B.Create a new session helper for the FTP service monitoring port 2121.
• C.Disable any protection profiles being applied to FTP traffic.
• D.Place the client and server interface in the same zone and enable intra-zone traffic.

Based on the web filtering configuration illustrated in the exhibit, which one of the following statements is not a reasonable conclusion?

• A.When a user attempts to access the www.fortinet.com site, any remaining web filtering will be bypassed.
• B.Downloaded content from www.google.com will be scanned for viruses if antivirus is enabled.
• C.Users can access both the www.google.com site and the www.fortinet.com site.
• D.When a user attempts to access the www.google.com site, the FortiGate unit will not perform web filtering on the content of that site.

A network administrator connects his PC to the INTERNAL interface on a FortiGate unit. The administrator attempts to make an HTTPS connection to the FortiGate unit on the VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity.
The following troubleshooting commands are executed from the DOS prompt on the PC and from
the CLI.
C:\>ping 10.0.1.1
Pinging 10.0.1.1 with 32 bytes of data:
Reply from 10.0.1.1: bytes=32 time=1ms TTL=255
Reply from 10.0.1.1: bytes=32 time<1ms TTL=255
Reply from 10.0.1.1: bytes=32 time<1ms TTL=255
Reply from 10.0.1.1: bytes=32 time<1ms TTL=255
user1 # get system interface
== [ internal ]
namE. internal modE. static ip: 10.0.1.254 255.255.255.128 status: up
netbios-forwarD. disable typE. physical mtu-overridE. disable
== [ vlan1 ]
namE. vlan1 modE. static ip: 10.0.1.1 255.255.255.128 status: up netb
ios-forwarD. disable typE. vlan mtu-overridE. disable
user1 # diagnose debug flow trace start 100
user1 # diagnose debug ena
user1 # diagnose debug flow filter daddr 10.0.1.1 10.0.1.1
id=20085 trace_id=274 msg="vd-root received a packet(proto=6, 10.0.1.130:47927->10.0.1.1:443)
from internal."
id=20085 trace_id=274 msg="allocate a new session-00000b1b"
id=20085 trace_id=274 msg="find SNAT: IP-10.0.1.1, port-43798"
id=20085 trace_id=274 msg="iprope_in_check() check failed, drop"
Based on the output from these commands, which of the following explanations is a possible cause of the problem?

• A.There is no firewall policy allowing traffic from INTERNAL-> VLAN1.
• B.The PC is using an incorrect default gateway IP address.
• C.The FortiGate unit does not have the HTTPS service configured on the VLAN1 interface.
• D.The PC has an IP address in the wrong subnet.
• E.The Fortigate unit has no route back to the PC.