FCP Network Security Fundamentals & Fortinet Solutions 4

Question 1

Which FortiGate feature uses machine learning to establish a baseline of normal network behavior and alert on anomalies?

Accepted Answer

Intrusion Prevention System (IPS) in anomaly mode

Answer

FortiGate IPS in anomaly detection mode monitors traffic patterns and flags deviations from established baselines, such as unusual connection rates or protocol violations.

Question 2

In a FortiGate IPsec VPN, what is Phase 1 responsible for establishing?

Accepted Answer

The IKE security association used to authenticate peers and negotiate Phase 2 parameters

Answer

IKE Phase 1 establishes the ISAKMP/IKE Security Association, authenticating the VPN peers and creating a secure channel over which Phase 2 negotiations occur.

Question 3

What is the function of the FortiGate 'Security Fabric' topology view?

Accepted Answer

It provides a visual map of connected Fortinet devices and their trust relationships

Answer

The Security Fabric topology view gives administrators a graphical overview of all connected Fortinet devices, their roles, and their integration status within the fabric.

Question 4

Which authentication method does FortiGate use for 'certificate-based' SSL VPN authentication?

Accepted Answer

PKI user certificate validated against a trusted CA

Answer

Certificate-based SSL VPN authentication requires users to present a valid PKI certificate issued or trusted by the configured CA on the FortiGate.

Question 5

What does FortiGate's 'geo-IP filtering' capability allow administrators to do?

Accepted Answer

Block or allow traffic based on the geographic location of source or destination IP addresses

Answer

Geo-IP filtering uses a database that maps IP addresses to countries, allowing policies to block or permit traffic based on the source or destination nation.

(FCP) Fortinet Certified Professional Security Operations Practice Test

(FCP) Fortinet Certified Professional Security Operations Practice Test

FCP Network Security Fundamentals & Fortinet Solutions 4