FCP Network Security Fundamentals & Fortinet Solutions 5

Question 1

What is the role of FortiNAC in a Fortinet Security Fabric deployment?

Accepted Answer

It provides network access control by profiling and enforcing policies on devices connecting to the network

Answer

FortiNAC discovers and profiles every device on the network, enforces access control policies, and can automatically quarantine non-compliant or unknown devices.

Question 2

Which FortiGate mechanism prevents IP spoofing by verifying that the source IP of incoming traffic matches the expected interface?

Accepted Answer

Reverse Path Forwarding (RPF) check

Answer

Reverse Path Forwarding (RPF), or anti-spoofing check, verifies that the return path for an incoming packet's source IP routes back through the same interface it arrived on.

Question 3

In FortiAnalyzer, what is the primary purpose of 'playbooks' in the SOC automation context?

Accepted Answer

To automate incident response workflows triggered by specific log events or alerts

Answer

FortiAnalyzer playbooks automate SOC response actions—such as quarantining an IP or notifying a team—when specific security events are detected in log data.

Question 4

What is the function of FortiGate's 'local-in policy'?

Accepted Answer

It controls traffic generated by the FortiGate itself, such as management and VPN traffic

Answer

Local-in policies control which traffic is permitted to reach the FortiGate's own management plane, restricting services like SSH, HTTPS, and SNMP to specific sources.

Question 5

Which encryption algorithm suite is recommended for IPsec VPN Phase 2 in a high-security FortiGate deployment?

Accepted Answer

AES-256 with SHA-256 or SHA-384

Answer

AES-256 combined with SHA-256 or SHA-384 provides strong encryption and integrity protection and is the current Fortinet best-practice recommendation for Phase 2 IPsec tunnels.

(FCP) Fortinet Certified Professional Security Operations Practice Test

(FCP) Fortinet Certified Professional Security Operations Practice Test

FCP Network Security Fundamentals & Fortinet Solutions 5