Fortinet Certified Network Security Professional (FCNSP v4.0) (FCNSP) - Fortinet Exam Questions

A network administrator is configuring an IPsec VPN tunnel for a sales employee travelling abroad.

Which IPsec Wizard template must the administrator apply?

Refer to the exhibits.



Network diagram PC1 10.0.1.1 18.0.2.254 port1 192.2.0.2 PC2 10.0.1.2 PC3 10.0.1.3



Dynamic IP pool Edit Dynamic IP Pool Name internet-pool Comments Write a comment... 6 0/255 Type One-to-One External IP Range O 192.2.0.10-192.2.0.11 ARP Reply



The exhibits show a diagram of a FortiGate device connected to the network, as well as the firewall policy and IP pool configuration on the FortiGate device. Two PCs, PC1 and PC2, are connected behind FortiGate and can access the internet successfully. However, when the administrator adds a third PC to the network (PC3), the PC cannot connect to the internet. Based on the information shown in the exhibit, which two configuration options can the administrator use to fix the connectivity issue for PC3? (Choose two.)

Which inspection mode does FortiGate use for application profiles if it is configured as a profile- based next-generation firewall (NGFW)?

Refer to the exhibit.



A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 failed to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match. Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes can the administrator make to bring phase 1 up? (Choose two.)

Refer to the exhibit.

Which statement about this firewall policy list is true?