FCNSP.v5 latest Fortinet certification exam questions and answers published

Fortinet FCNSP.v5 is one of the important certification exams. ITCertKing's experienced IT experts through their extensive experience and professional IT expertise have come up with IT certification exam study materials to help people pass Fortinet Certification FCNSP.v5 exam successfully. ITCertKing's providing learning materials can not only help you 100% pass the exam, but also provide you a free one-year update service.

Fortinet FCNSP.v5 exam is very popular in IT field. Having FCNSP.v5 certificate is the best for those people who want to be promoted and is also a valid selection. And with the aid of FCNSP.v5 certification test, you can improve your skills and master some useful techniques in your job so that you can finish your work better and demonstrate your great ability before other people. Only in this way can you get more development opportunities.

We are committed to using ITCertKing Fortinet FCNSP.v5 exam training materials, we can ensure that you pass the exam on your first attempt. If you are ready to take the exam, and then use our ITCertKing Fortinet FCNSP.v5 exam training materials, we guarantee that you can pass it. If you do not pass the exam, we can give you a refund of the full cost of the materials purchased, or free to send you another product of same value.

Have you thought of how to easily pass Fortinet FCNSP.v5 test? Have you found the trick? If you don't know what to do, I'll help you. In actual, there are many methods to sail through FCNSP.v5 exam. One is to learn exam related knowledge FCNSP.v5 certification test demands. Are you doing like this?However the above method is the worst time-waster and you cannot get the desired effect. Busying at work, you might have not too much time on preparing for FCNSP.v5 certification test. Try ITCertKing Fortinet FCNSP.v5 exam dumps. ITCertKing dumps can absolutely let you get an unexpected effect.

If you are still study hard to prepare the Fortinet FCNSP.v5 exam, you're wrong. Of course, with studying hard, you can pass the exam. But may not be able to achieve the desired effect. Now this is the age of the Internet, there are a lot of shortcut to success. ITCertKing's Fortinet FCNSP.v5 exam training materials is a good training materials. It is targeted, and guarantee that you can pass the exam. This training matrial is not only have reasonable price, and will save you a lot of time. You can use the rest of your time to do more things. So that you can achieve a multiplier effect.

Exam Code: FCNSP.v5
Exam Name: Fortinet (Fortinet Certified Network Security Professional (FCNSP.v5))
One year free update, No help, Full refund!
Total Q&A: 120 Questions and Answers
Last Update: 2014-01-05

FCNSP.v5 Free Demo Download: http://www.itcertking.com/FCNSP.v5_exam.html

NO.1 Examine the exhibit shown below then answer the question that follows it.
Within the UTM Proxy Options, the CA certificate Fortinet_CA_SSLProxy defines which of the
following:
A. FortiGate unit's encryption certificate used by the SSL proxy.
B. FortiGate unit's signing certificate used by the SSL proxy.
C. FortiGuard's signing certificate used by the SSL proxy.
D. FortiGuard's encryption certificate used by the SSL proxy.
Answer: A

Fortinet   FCNSP.v5   FCNSP.v5

NO.2 Which of the following statements are correct regarding Application Control?
A. Application Control is based on the IPS engine.
B. Application Control is based on the AV engine.
C. Application Control can be applied to SSL encrypted traffic.
D. Application Control cannot be applied to SSL encrypted traffic.
Answer: A,C

Fortinet questions   FCNSP.v5 test questions   FCNSP.v5 original questions   FCNSP.v5 demo   FCNSP.v5 demo   FCNSP.v5 exam prep

NO.3 Which of the following represents the method used on a FortiGate unit running FortiOS
version 4.2 to apply traffic shaping to P2P traffic, such as BitTorrent?
A. Apply a Traffic Shaper to a BitTorrent entry in an Application Control List.
B. Enable the Shape option in a Firewall policy with a Service set to BitTorrent.
C. Define a DLP Rule to match against BitTorrent traffic and include the rule in a DLP Sensor with
Traffic Shaping enabled.
D. Specify the amount of Rate Limiting to be applied to BitTorrent traffic through the P2P settings of
the Firewall Policy Protocol Options.
Answer: A

Fortinet   FCNSP.v5   FCNSP.v5   FCNSP.v5   FCNSP.v5   FCNSP.v5

NO.4 Which of the following represents the correct order of criteria used for the selection of a
Master unit within a FortiGate High Availability (HA) cluster when master override is disabled?
A. 1. port monitor, 2. unit priority, 3. up time, 4. serial number
B. 1. port monitor, 2. up time, 3. unit priority, 4. serial number
C. 1. unit priority, 2. up time, 3. port monitor, 4. serial number
D. 1. up time, 2. unit priority, 3. port monitor, 4. serial number
Answer: B

Fortinet   FCNSP.v5 exam simulations   FCNSP.v5   FCNSP.v5   FCNSP.v5   FCNSP.v5

NO.5 What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a
fully-meshed set of IPSec tunnels? (Select all that apply.)
A. Using a hub and spoke topology is required to achieve full redundancy.
B. Using a hub and spoke topology simplifies configuration because fewer tunnels are required.
C. Using a hub and spoke topology provides stronger encryption.
D. The routing at a spoke is simpler, compared to a meshed node.
Answer: B,D

Fortinet   FCNSP.v5   FCNSP.v5 questions   FCNSP.v5   FCNSP.v5 exam dumps

NO.6 For Data Leak Prevention, which of the following describes the difference between the block
and quarantine actions?
A. A block action prevents the transaction. A quarantine action blocks all future transactions,
regardless of the protocol.
B. A block action prevents the transaction. A quarantine action archives the data.
C. A block action has a finite duration. A quarantine action must be removed by an administrator.
D. A block action is used for known users. A quarantine action is used for unknown users.
Answer: A

Fortinet test   FCNSP.v5   FCNSP.v5   FCNSP.v5   FCNSP.v5

NO.7 Which of the following must be configured on a FortiGate unit to redirect content requests to
remote web cache servers?
A. WCCP must be enabled on the interface facing the Web cache.
B. You must enabled explicit Web-proxy on the incoming interface.
C. WCCP must be enabled as a global setting on the FortiGate unit.
D. WCCP must be enabled on all interfaces on the FortiGate unit through which HTTP traffic is
passing.
Answer: A

Fortinet certification   FCNSP.v5   FCNSP.v5 exam   FCNSP.v5 questions   FCNSP.v5 practice test

NO.8 How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)
A. File TypE. Microsoft Office(msoffice)
B. File TypE. Archive(zip)
C. File TypE. Unknown Filetype(unknown)
D. File NamE. "*.ppt", "*.doc", "*.xls"
E. File NamE. "*.pptx", "*.docx", "*.xlsx"
Answer: B,E

Fortinet study guide   FCNSP.v5 dumps   FCNSP.v5

NO.9 In a High Availability cluster operating in Active-Active mode, which of the following correctly
describes the path taken by the SYN packet of an HTTP session that is offloaded to a subordinate
unit?
A. Request: Internal Host; Master FortiGate; Slave FortiGate; Internet; Web Server
B. Request: Internal Host; Master FortiGate; Slave FortiGate; Master FortiGate; Internet; Web Server
C. Request: Internal Host; Slave FortiGate; Internet; Web Server
D. Request: Internal Host; Slave FortiGate; Master FortiGate; Internet; Web Server
Answer: A

Fortinet   FCNSP.v5   FCNSP.v5 practice test

NO.10 FSSO provides a single sign on solution to authenticate users transparently to a FortiGate unit
using credentials stored in Windows Active Directory.
Which of the following statements are correct regarding FSSO in a Windows domain environment
when NTLM and Polling Mode are not used? (Select all that apply.)
A. An FSSO Collector Agent must be installed on every domain controller.
B. An FSSO Domain Controller Agent must be installed on every domain controller.
C. The FSSO Domain Controller Agent will regularly update user logon information on the FortiGate
unit.
D. The FSSO Collector Agent will retrieve user information from the Domain Controller Agent and
will send the user logon information to the FortiGate unit.
E. For non-domain computers, the only way to allow FSSO authentication is to install an FSSO client.
Answer: B,D

Fortinet   FCNSP.v5 practice test   FCNSP.v5 exam prep   FCNSP.v5

NO.11 Data Leak Prevention archiving gives the ability to store files and message data onto a
FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)
A. SNMP
B. IPSec
C. SMTP
D. POP3
E. HTTP
Answer: C,D,E

Fortinet pdf   FCNSP.v5 questions   FCNSP.v5 pdf   FCNSP.v5 demo   FCNSP.v5

NO.12 Which of the following statements are correct regarding virtual domains (VDOMs)? (Select all
that apply.)
A. VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple,
independent units.
B. A management VDOM handles SNMP , logging, alert email, and FDN-based updates.
C. VDOMs share firmware versions, as well as antivirus and IPS databases.
D. Only administrative users with a 'super_admin' profile will be able to enter multiple VDOMs to
make configuration changes.
Answer: A,B,C

Fortinet questions   FCNSP.v5 test   FCNSP.v5   FCNSP.v5 demo

ITCertKing offer the latest 00M-622 exam material and high-quality 70-561 pdf questions & answers. Our C_TSCM62_65 VCE testing engine and HP2-B102 study guide can help you pass the real exam. High-quality C-TSCM62-65 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/FCNSP.v5_exam.html

The best of Fortinet certification FCNSP exam test software

When you click into ITCertKing's site, you will see so many people daily enter the website. You can not help but be surprised. In fact, this is normal. ITCertKing is provide different training materials for alot of candidates. They are using our training materials tto pass the exam. This shows that our Fortinet FCNSP exam training materials can really play a role. If you want to buy, then do not miss ITCertKing website, you will be very satisfied.

There are many ways to help you prepare for your Fortinet FCNSP exam. ITCertKing provide a reliable training tools to help you prepare for your Fortinet FCNSP exam certification. The ITCertKing Fortinet FCNSP exam materials are including test questions and answers. Our materials are very good sofeware that through the practice test. Our materials will meet all of theIT certifications.

Fortinet certification FCNSP exam has become a very popular test in the IT industry, but in order to pass the exam you need to spend a lot of time and effort to master relevant IT professional knowledge. In such a time is so precious society, time is money. ITCertKing provide a training scheme for Fortinet certification FCNSP exam, which only needs 20 hours to complete and can help you well consolidate the related IT professional knowledge to let you have a good preparation for your first time to participate in Fortinet certification FCNSP exam.

Exam Code: FCNSP
Exam Name: Fortinet (Fortinet Certified Network Security Professional (FCNSP v4.2))
One year free update, No help, Full refund!
Total Q&A: 120 Questions and Answers
Last Update: 2013-10-24

ITCertKing's product is prepared for people who participate in the Fortinet certification FCNSP exam. ITCertKing's training materials include not only Fortinet certification FCNSP exam training materials which can consolidate your expertise, but also high degree of accuracy of practice questions and answers about Fortinet certification FCNSP exam. ITCertKing can guarantee you passe the Fortinet certification FCNSP exam with high score the even if you are the first time to participate in this exam.

What is ITCertKing Fortinet FCNSP exam training materials? There are many online sites provide Fortinet FCNSP exam training resources. But ITCertKing provide you the most actual information. ITCertKing have professional personnel of certification experts, technical staff, and comprehensive language masters. They are always studying the latest Fortinet FCNSP exam. Therefore, if you want to pass the Fortinet FCNSP examination, please Login ITCertKing website. It will let you close to your success, and into your dream paradise step by step.

ITCertKing is an excellent source of information on IT Certifications. In the ITCertKing, you can find study skills and learning materials for your exam. ITCertKing's Fortinet FCNSP training materials are studied by the experienced IT experts. It has a strong accuracy and logic. To encounter ITCertKing, you will encounter the best training materials. You can rest assured that using our Fortinet FCNSP exam training materials. With it, you have done fully prepared to meet this exam.

FCNSP Free Demo Download: http://www.itcertking.com/FCNSP_exam.html

NO.1 Which of the following statements are correct regarding the antivirus scanning function on the FortiGate
unit?
A.Antivirus scanning can be configured to block certain file types and patterns.
B.Antivirus scanning provides end-to-end virus protection for client workstations.
C.Antivirus scanning provides virus protection for the HTTP, Telnet, SMTP, and FTP protocols.
D.Antivirus scanning supports banned word checking.
E.Antivirus scanning supports grayware protection.
Answer:AE

Fortinet   FCNSP exam   FCNSP exam prep   FCNSP   FCNSP answers real questions

NO.2 Which of the following items are considered to be advantages of using the application control features
on the FortiGate unit?
A.Application control provides application detection regardless of the port used by the application.
B.Application control allows session-ttl to be customized for specific application types.
C.Application control allows custom application types to be added in a similar way to adding custom IPS
signatures.
D.Application control allows an administrator to check which applications are installed on workstations
attempting to access the network.
Answer: AB

Fortinet   FCNSP exam simulations   FCNSP   FCNSP test   FCNSP certification

NO.3 The transfer of encrypted files or the use of encrypted protocols between users and servers on the
internet can frustrate the efforts of administrators attempting to monitor traffic passing through the
FortiGate unit and ensuring user compliance to corporate rules.
Which of the following items will allow the administrator to control the transfer of encrypted data through
the FortiGate unit?
A.Encrypted protocols can be scanned through the use of the SSL proxy.
B.DLP rules can be used to block the transmission of encrypted files.
C.Firewall authentication can be enabled in the firewall policy, preventing the use of encrypted
communications channels.
D.Application control can be used to monitor the use of encrypted protocols; alerts can be sent to the
administrator through email when the use of encrypted protocols is attempted.
Answer: AB

Fortinet answers real questions   FCNSP   FCNSP answers real questions   FCNSP original questions

NO.4 Which part of an email message exchange is not inspected by the POP3 and IMAP proxies?
A.TCP connection
B.Protocol commands
C.Message headers
D.Message body
Answer: A

Fortinet exam   FCNSP test answers   FCNSP pdf   FCNSP test questions   FCNSP pdf   FCNSP exam dumps

NO.5 When viewing the Banned User tab in User Monitor in Web Config, the administrator notes the entry
illustrated in the exhibit. Which of the following statements is correct regarding this entry?
A.The entry displays a ban that has been added as a result of traffic triggering a configured DLP rule.
B.The entry displays a ban that was triggered by HTTP traffic matching an IPS signature. This client is
banned from receiving or sending any traffic through the FortiGate.
C.The entry displays a quarantine, which could have been added by either IPS or DLP.
D.This entry displays a ban entry that was added manually by the administrator on Dec 24th.
Answer: A

Fortinet   FCNSP   FCNSP exam dumps   FCNSP   FCNSP test answers

NO.6 An administrator is examining the attack logs and notices the following entry:
attack_id=100663402 src=192.168.0.79 dst=64.64.64.64 src_port=57133 dst_port=80 interface=port3
src_int=n/a dst_int=n/a status=dropped proto=6 service=http msg="TCP session over limit
Based solely upon this log message, which of the following statements is correct?
A.This attack was blocked by the HTTP protocol decoder.
B.This attack was caught by the DoS sensor.
C.This attack was launched against the FortiGate unit itself rather than a host behind the FortiGate unit.
D.The number of concurrent connections to destination IP address 64.64.64.64 has exceeded the
configured threshold.
Answer: B

Fortinet exam   FCNSP demo   FCNSP exam

NO.7 A DLP rule with an action of Exempt has been matched against traffic passing through the FortiGate
unit. Which of the following statements is correct regarding how this transaction will be handled by the
FortiGate unit?
A.Any other matched DLP rules will be ignored with the exception of Archiving.
B.Any other matched DLP rules are ignored.
C.The traffic matching the DLP rule will bypass antivirus scanning.
D.The client IP address will be added to a white list.
Answer: A

Fortinet exam simulations   FCNSP   FCNSP original questions   FCNSP

NO.8 Which of the following describes the difference between the ban and quarantine actions?
A.A ban action prevents future transactions using the same protocol which triggered the ban. A qarantine
action blocks all future transactions, regardless of the protocol.
B.A ban action blocks the transaction. A quarantine action archives the data.
C.A ban action has a finite duration. A quarantine action must be removed by an administrator.
D.A ban action is used for known users. A quarantine action is used for unknown users.
Answer: A

Fortinet dumps   FCNSP   FCNSP   FCNSP answers real questions   FCNSP braindump   FCNSP

NO.9 Based on the web filtering configuration illustrated in the exhibit, which one of the following statements
is not a reasonable conclusion?
A.Users can access both the www.google.com site and the www.fortinet.com site.
B.When a user attempts to access the www.google.com site, the FortiGate unit will not perform web
filtering on the content of that site.
C.When a user attempts to access the www.fortinet.com site, any remaining web filtering will be
bypassed.
D.Downloaded content from www.google.com will be scanned for viruses if antivirus is enabled.
Answer: B

Fortinet demo   FCNSP   FCNSP study guide

NO.10 Which of the following describes the best custom signature for detecting the use of the word "Fortinet" in
chat applications.?
The sample packet trace illustrated in the exhibit provides details on the packet that requires detection.
A.F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --no_case; )
B.F-SBID( --protocol tcp; --flow from_client; --pattern "fortinet"; --no_case; )
C.F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --within 20;
--no_case; )
D.F-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; --within
20; )
Answer:A

Fortinet practice test   FCNSP   FCNSP exam prep

ITCertKing offer the latest 700-505 exam material and high-quality LOT-405 pdf questions & answers. Our 70-583 VCE testing engine and HP2-B103 study guide can help you pass the real exam. High-quality HP2-N42 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/FCNSP_exam.html

925-201B latest dumps

When we started offering Fortinet 925-201B exam questions and answers and exam simulator, we did not think that we will get such a big reputation. What we are doing now is incredible form of a guarantee. ITCertKing guarantee passing rate of 100%, you use your Fortinet 925-201B exam to try our Fortinet 925-201B training products, this is correct, we can guarantee your success.

You have ITCertKing Fortinet 925-201B certification exam training materials, the same as having a bright future. ITCertKing Fortinet 925-201B exam certification training is not only the cornerstone to success, and can help you to play a greater capacity in the IT industry. The training materials covering a wide range, not only to improve your knowledge of the culture, the more you can improve the operation level. If you are still waiting, still hesitating, or you are very depressed how through Fortinet 925-201B certification exam. Do not worry, the ITCertKing Fortinet 925-201B exam certification training materials will help you solve these problems.

When you try our part of Fortinet certification 925-201B exam practice questions and answers, you can make a choice to our ITCertKing. We will be 100% providing you convenience and guarantee. Remember that making you 100% pass Fortinet certification 925-201B exam is ITCertKing.

ITCertKing's Fortinet 925-201B exam training materials are the necessities of each of candidates who participating in the IT certification. With this training material, you can do a full exam preparation. So that you will have the confidence to win the exam. ITCertKing's Fortinet 925-201B exam training materials are highly targeted. Not every training materials on the Internet have such high quality. Only ITCertKing could be so perfect.

Your dream is very high, so you have to find a lot of material to help you prepare for the exam. ITCertKing Fortinet 925-201B exam materials can help you to achieve your ideal. ITCertKing Fortinet 925-201B exam materials is a collection of experience and innovation from highly certified IT professionals in the field. Our products will let you try all the problems that may arise in a really examinations. We can give you a guarantee, to ensure that candidates get a 100% correct answer.

Exam Code: 925-201B
Exam Name: Fortinet (Principles of Network Security and FortiGate Configurations)
One year free update, No help, Full refund!
Total Q&A: 104 Questions and Answers
Last Update: 2013-10-15

925-201B Free Demo Download: http://www.itcertking.com/925-201b_exam.html

NO.1 What is the valid address object in Fortigate unit ?
A. 10.1.1.1 / 255.255.255.0
B. 10.1.1.1 / 255.255.255.255
C. 10.1.1.1 / 255.255.255.248
D. 10.1.1.1 / 255.255.255.252
Answer: B

Fortinet test   925-201B test answers   925-201B test   925-201B exam dumps

NO.2 What are the valid option in web filtering ?
A. content block
B. url block
C. exempt list
D. script filtering
Answer: A , B, C , D

Fortinet answers real questions   925-201B answers real questions   925-201B certification training   925-201B

NO.3 What is the valid IPS option ?
A. IPS signature
B. IPS anomaly
C. IPS engine
D. IPS list
Answer: A , D

Fortinet original questions   925-201B dumps   925-201B   925-201B   925-201B answers real questions   925-201B

NO.4 What is the valid web script filtering option for web filtering ?
A. Java Applet
B. Worm
C. ActiveX
D. Cookie
Answer: A, C, D

Fortinet   925-201B test   925-201B   925-201B

NO.5 What is the valid ipsec phase 1 option
A. des
B. 3des
C. md5
D. sha1
Answer: A , B

Fortinet   925-201B dumps   925-201B dumps   925-201B

NO.6 What is the valid method to fixup Fortigate interface speed&duplex?
A. via web GUI
B. via CLI
C. via auto update
D. via foritlog
Answer: B

Fortinet answers real questions   925-201B exam dumps   925-201B   925-201B certification training

NO.7 What is the valid network in Fortigate
A. 10.1.1.0 / 255.255.255.0
B. 10.1.1.1 / 255.255.255.0
C. 10.1.1.0 / 255.255.255.255
D. 10.1.1.0 / 255.255.0.0
Answer: B, D

Fortinet certification   925-201B certification   925-201B exam simulations   925-201B practice test

NO.8 Which of the following firmware upgrade method will cause configuration reset?
A. WebUI
B. CLI
C. Fortimanager
D. interrupt booting procedure by CLI
Answer: D

Fortinet original questions   925-201B   925-201B

NO.9 Which of the following default factory setting is true about Fortigate unit?
A. internal: 192.168.1.99/24; http, https, ping, ssh access is enabled
B. external: 192.168.100.99/24; ping is enabled
C. internal: 192.168.1.99/24;https,ping,ssh access is enable
D. external: 192.168.100.99/24;ping & http is enable
Answer: A , B

Fortinet test answers   925-201B   925-201B   925-201B questions

NO.10 what is the valid ipsec pahse 2 option
A. des
B. 3des
C. md5
D. sha1
Answer: C, D

Fortinet original questions   925-201B exam simulations   925-201B   925-201B

NO.11 What is valid router object of Fortigate unit ?
A. prefix list
B. route map
C. key chain list
D. access list
Answer: A , B, C

Fortinet   925-201B   925-201B   925-201B questions

NO.12 What is the default protection profile ?
A. strict
B. scan
C. web
D. unfiltered
Answer: A , B, C , D

Fortinet   925-201B   925-201B   925-201B   925-201B test questions   925-201B dumps

NO.13 Which logging can enable when enable protection profile content log?
A. HTTP
B. FTP
C. IMAP
D. POP3
E. SMTP
Answer: A , B, C , D

Fortinet demo   925-201B   925-201B   925-201B   925-201B answers real questions   925-201B

NO.14 What is the best way to implement Fortigate HA ?
A. connect corresponding interface to individual switch
B. connect all interface to the same hub or switch
C. connect corresponding interface directly using cross-over cable
D. connect corresponding interface directly using straight-through cable
Answer: A

Fortinet   925-201B   925-201B certification   925-201B study guide

NO.15 Which command can show HA status ?
A. get system status
B. diag sys ha status
C. exec ha maga 1
D. get sys lic
E. config ha
Answer: A , b , ,C

Fortinet   925-201B   925-201B questions   925-201B test   925-201B

NO.16 Which of the following statement about TCP MTU for Fortigate is true?
A. default MTU is 1500 bytes
B. For manual and DHCP addressing mode the MTU size can be from 576 to 1500 bytes
C. for PPPOE addressing mode the MTU size can be from 576 to 1492 bytes
D. default MTU is 1492 bytes
Answer: A , B, C

Fortinet original questions   925-201B   925-201B   925-201B demo

NO.17 Which one is the most efficient way to block MSN traffic by Fortigate unit ?
A. Use IPS module by applying protection profile
B. Use Antivirus engine
C. Use firewall policy
D. Use content filtering
Answer: A

Fortinet questions   925-201B exam dumps   925-201B

NO.18 What service can protection profile protect?
A. ftp
B. IMAP
C. POP3
D. http
E. SMTP
Answer: A , B, C , D , E

Fortinet   925-201B study guide   925-201B test questions   925-201B test   925-201B certification

NO.19 What are the necessary procedure before using Xauth . ?
A. create user group
B. create firewall policy
C. enable IPSEC VPN
D. enable PPTP
Answer: A , B, C

Fortinet braindump   925-201B test answers   925-201B exam prep   925-201B questions

NO.20 What is the valid option of Fortigate HA schedule
A. none , hub , least-connection , round-robin
B. weighted round-robin , random , ip , ip port
C. switch , ip , ip port
D. priority , hub , least-connection
Answer: A , B

Fortinet   925-201B test   925-201B original questions   925-201B exam prep

ITCertKing offer the latest 70-341 exam material and high-quality 000-N45 pdf questions & answers. Our 70-462 VCE testing engine and LOT-442 study guide can help you pass the real exam. High-quality 642-384 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/925-201b_exam.html

The best of Fortinet certification FCNSP.v5 exam test software

Using ITCertKing you can pass the Fortinet FCNSP.v5 exam easily. The first time you try to participate in Fortinet FCNSP.v5 exam, selecting ITCertKing's Fortinet FCNSP.v5 training tools and downloading Fortinet FCNSP.v5 practice questions and answers will increase your confidence of passing the exam and will effectively help you pass the exam. Other online websites also provide training tools about Fortinet certification FCNSP.v5 exam, but the quality of our products is very good. Our practice questions and answers have high accuracy. Our training materials have wide coverage of the content of the examination and constantly update and compile. ITCertKing can provide you with a very high accuracy of exam preparation. Selecting ITCertKing can save you a lot of time, so that you can get the Fortinet FCNSP.v5 certification earlier to allow you to become a Fortinet IT professionals.

Add ITCertKing's products to cart now! You will have 100% confidence to participate in the exam and disposably pass Fortinet certification FCNSP.v5 exam. At last, you will not regret your choice.

Selecting ITCertKing can 100% help you pass the exam. According to Fortinet FCNSP.v5 test subjects' changing, we will continue to update our training materials and will provide the latest exam content. ITCertKing can provide a free 24-hour online customer service for you . If you do not pass Fortinet certification FCNSP.v5 exam, we will full refund to you.

Exam Code: FCNSP.v5
Exam Name: Fortinet (Fortinet Certified Network Security Professional (FCNSP.v5))
One year free update, No help, Full refund!
Total Q&A: 120 Questions and Answers
Last Update: 2013-09-30

We are doing our utmost to provide services with high speed and efficiency to save your valuable time for the majority of candidates. The Fortinet FCNSP.v5 materials of ITCertKing offer a lot of information for your exam guide, including the questions and answers. ITCertKing is best website that providing Fortinet FCNSP.v5 exam training materials with high quality on the Internet. With the learning information and guidance of ITCertKing, you can through Fortinet FCNSP.v5 exam the first time.

Now Fortinet FCNSP.v5 is a hot certification exam in the IT industry, and a lot of IT professionals all want to get Fortinet FCNSP.v5 certification. So Fortinet certification FCNSP.v5 exam is also a very popular IT certification exam. Fortinet FCNSP.v5 certificate is very helpful to your work in the IT industry, which can help promote your position and salary a lot and let your life have more security.

FCNSP.v5 Free Demo Download: http://www.itcertking.com/FCNSP.v5_exam.html

NO.1 Which of the following statements are correct regarding Application Control?
A. Application Control is based on the IPS engine.
B. Application Control is based on the AV engine.
C. Application Control can be applied to SSL encrypted traffic.
D. Application Control cannot be applied to SSL encrypted traffic.
Answer: A,C

Fortinet exam   FCNSP.v5   FCNSP.v5 exam

NO.2 Which of the following statements are correct regarding virtual domains (VDOMs)? (Select all
that apply.)
A. VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple,
independent units.
B. A management VDOM handles SNMP , logging, alert email, and FDN-based updates.
C. VDOMs share firmware versions, as well as antivirus and IPS databases.
D. Only administrative users with a 'super_admin' profile will be able to enter multiple VDOMs to
make configuration changes.
Answer: A,B,C

Fortinet braindump   FCNSP.v5 exam simulations   FCNSP.v5 study guide   FCNSP.v5

NO.3 Which of the following must be configured on a FortiGate unit to redirect content requests to
remote web cache servers?
A. WCCP must be enabled on the interface facing the Web cache.
B. You must enabled explicit Web-proxy on the incoming interface.
C. WCCP must be enabled as a global setting on the FortiGate unit.
D. WCCP must be enabled on all interfaces on the FortiGate unit through which HTTP traffic is
passing.
Answer: A

Fortinet   FCNSP.v5   FCNSP.v5 certification   FCNSP.v5   FCNSP.v5 braindump   FCNSP.v5 test

NO.4 Examine the exhibit shown below then answer the question that follows it.
Within the UTM Proxy Options, the CA certificate Fortinet_CA_SSLProxy defines which of the
following:
A. FortiGate unit's encryption certificate used by the SSL proxy.
B. FortiGate unit's signing certificate used by the SSL proxy.
C. FortiGuard's signing certificate used by the SSL proxy.
D. FortiGuard's encryption certificate used by the SSL proxy.
Answer: A

Fortinet exam simulations   FCNSP.v5   FCNSP.v5   FCNSP.v5   FCNSP.v5

NO.5 In a High Availability cluster operating in Active-Active mode, which of the following correctly
describes the path taken by the SYN packet of an HTTP session that is offloaded to a subordinate
unit?
A. Request: Internal Host; Master FortiGate; Slave FortiGate; Internet; Web Server
B. Request: Internal Host; Master FortiGate; Slave FortiGate; Master FortiGate; Internet; Web Server
C. Request: Internal Host; Slave FortiGate; Internet; Web Server
D. Request: Internal Host; Slave FortiGate; Master FortiGate; Internet; Web Server
Answer: A

Fortinet demo   FCNSP.v5   FCNSP.v5 answers real questions   FCNSP.v5

NO.6 Which of the following represents the correct order of criteria used for the selection of a
Master unit within a FortiGate High Availability (HA) cluster when master override is disabled?
A. 1. port monitor, 2. unit priority, 3. up time, 4. serial number
B. 1. port monitor, 2. up time, 3. unit priority, 4. serial number
C. 1. unit priority, 2. up time, 3. port monitor, 4. serial number
D. 1. up time, 2. unit priority, 3. port monitor, 4. serial number
Answer: B

Fortinet answers real questions   FCNSP.v5 test   FCNSP.v5   FCNSP.v5

NO.7 What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a
fully-meshed set of IPSec tunnels? (Select all that apply.)
A. Using a hub and spoke topology is required to achieve full redundancy.
B. Using a hub and spoke topology simplifies configuration because fewer tunnels are required.
C. Using a hub and spoke topology provides stronger encryption.
D. The routing at a spoke is simpler, compared to a meshed node.
Answer: B,D

Fortinet   FCNSP.v5   FCNSP.v5 pdf

NO.8 Which of the following represents the method used on a FortiGate unit running FortiOS
version 4.2 to apply traffic shaping to P2P traffic, such as BitTorrent?
A. Apply a Traffic Shaper to a BitTorrent entry in an Application Control List.
B. Enable the Shape option in a Firewall policy with a Service set to BitTorrent.
C. Define a DLP Rule to match against BitTorrent traffic and include the rule in a DLP Sensor with
Traffic Shaping enabled.
D. Specify the amount of Rate Limiting to be applied to BitTorrent traffic through the P2P settings of
the Firewall Policy Protocol Options.
Answer: A

Fortinet certification training   FCNSP.v5   FCNSP.v5 practice test   FCNSP.v5

NO.9 Data Leak Prevention archiving gives the ability to store files and message data onto a
FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)
A. SNMP
B. IPSec
C. SMTP
D. POP3
E. HTTP
Answer: C,D,E

Fortinet   FCNSP.v5 test   FCNSP.v5 certification training   FCNSP.v5 questions   FCNSP.v5

NO.10 For Data Leak Prevention, which of the following describes the difference between the block
and quarantine actions?
A. A block action prevents the transaction. A quarantine action blocks all future transactions,
regardless of the protocol.
B. A block action prevents the transaction. A quarantine action archives the data.
C. A block action has a finite duration. A quarantine action must be removed by an administrator.
D. A block action is used for known users. A quarantine action is used for unknown users.
Answer: A

Fortinet pdf   FCNSP.v5   FCNSP.v5 dumps   FCNSP.v5 certification   FCNSP.v5

NO.11 FSSO provides a single sign on solution to authenticate users transparently to a FortiGate unit
using credentials stored in Windows Active Directory.
Which of the following statements are correct regarding FSSO in a Windows domain environment
when NTLM and Polling Mode are not used? (Select all that apply.)
A. An FSSO Collector Agent must be installed on every domain controller.
B. An FSSO Domain Controller Agent must be installed on every domain controller.
C. The FSSO Domain Controller Agent will regularly update user logon information on the FortiGate
unit.
D. The FSSO Collector Agent will retrieve user information from the Domain Controller Agent and
will send the user logon information to the FortiGate unit.
E. For non-domain computers, the only way to allow FSSO authentication is to install an FSSO client.
Answer: B,D

Fortinet   FCNSP.v5 practice test   FCNSP.v5

NO.12 How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)
A. File TypE. Microsoft Office(msoffice)
B. File TypE. Archive(zip)
C. File TypE. Unknown Filetype(unknown)
D. File NamE. "*.ppt", "*.doc", "*.xls"
E. File NamE. "*.pptx", "*.docx", "*.xlsx"
Answer: B,E

Fortinet test   FCNSP.v5   FCNSP.v5   FCNSP.v5 original questions

ITCertKing offer the latest ICBB exam material and high-quality CUR-009 pdf questions & answers. Our 70-487 VCE testing engine and 000-657 study guide can help you pass the real exam. High-quality CAT-500 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/FCNSP.v5_exam.html