FCP Network Security Fundamentals & Fortinet Solutions 5 — Questions and Answers
Question 1: What is the role of FortiNAC in a Fortinet Security Fabric deployment?
- It accelerates SSL VPN throughput for remote users
- It provides network access control by profiling and enforcing policies on devices connecting to the network (Correct answer)
- It acts as the central log aggregator for all fabric devices
- It performs DNS-based security filtering for IoT devices
Correct answer: It provides network access control by profiling and enforcing policies on devices connecting to the network
FortiNAC discovers and profiles every device on the network, enforces access control policies, and can automatically quarantine non-compliant or unknown devices.
Question 2: Which FortiGate mechanism prevents IP spoofing by verifying that the source IP of incoming traffic matches the expected interface?
- Reverse Path Forwarding (RPF) check (Correct answer)
- AntiSpam engine
- ARP inspection
- IP integrity header checking
Correct answer: Reverse Path Forwarding (RPF) check
Reverse Path Forwarding (RPF), or anti-spoofing check, verifies that the return path for an incoming packet's source IP routes back through the same interface it arrived on.
Question 3: In FortiAnalyzer, what is the primary purpose of 'playbooks' in the SOC automation context?
- To script FortiGate CLI commands for bulk configuration changes
- To automate incident response workflows triggered by specific log events or alerts (Correct answer)
- To schedule periodic compliance reports for management review
- To define SD-WAN traffic steering rules based on application type
Correct answer: To automate incident response workflows triggered by specific log events or alerts
FortiAnalyzer playbooks automate SOC response actions—such as quarantining an IP or notifying a team—when specific security events are detected in log data.
Question 4: What is the function of FortiGate's 'local-in policy'?
- It controls traffic generated by the FortiGate itself, such as management and VPN traffic (Correct answer)
- It filters traffic between internal VLANs on the same FortiGate
- It applies QoS shaping to locally cached content
- It enforces policies on traffic destined for the DMZ
Correct answer: It controls traffic generated by the FortiGate itself, such as management and VPN traffic
Local-in policies control which traffic is permitted to reach the FortiGate's own management plane, restricting services like SSH, HTTPS, and SNMP to specific sources.
Question 5: Which encryption algorithm suite is recommended for IPsec VPN Phase 2 in a high-security FortiGate deployment?
- DES with MD5
- 3DES with SHA-1
- AES-256 with SHA-256 or SHA-384 (Correct answer)
- RC4 with SHA-1
Correct answer: AES-256 with SHA-256 or SHA-384
AES-256 combined with SHA-256 or SHA-384 provides strong encryption and integrity protection and is the current Fortinet best-practice recommendation for Phase 2 IPsec tunnels.
Question 6: What is 'Security Fabric Automation' in FortiOS and how does it work?
- It automatically patches FortiGate firmware without admin approval
- It uses trigger-and-action pairs to automatically respond to security events across the fabric (Correct answer)
- It auto-generates firewall policies based on traffic analysis
- It continuously optimizes SD-WAN path selection using AI
Correct answer: It uses trigger-and-action pairs to automatically respond to security events across the fabric
Security Fabric Automation uses configurable triggers (e.g., compromised host detection) and actions (e.g., quarantine, webhook notification) to orchestrate automated responses across Fortinet devices.
Question 7: Which FortiGate feature provides protection against web application attacks such as SQL injection and cross-site scripting (XSS)?
- FortiGate Antivirus profile
- Web Application Firewall (WAF) policy (Correct answer)
- DNS Filter
- Intrusion Prevention System in IDS mode
Correct answer: Web Application Firewall (WAF) policy
FortiGate's Web Application Firewall (WAF) inspects HTTP/HTTPS traffic and blocks layer-7 attacks like SQL injection, XSS, and CSRF targeting web applications.
FCP Network Security Fundamentals & Fortinet Solutions 5
What is the role of FortiNAC in a Fortinet Security Fabric deployment?