FCP Security Policy Management & Compliance 3

Question 1

Which FortiGate feature allows an administrator to define acceptable use policies by displaying a disclaimer page to users before granting internet access?

Accepted Answer

Captive portal with disclaimer

Answer

FortiGate captive portal can require users to acknowledge an acceptable use policy disclaimer before traffic is permitted through the policy.

Question 2

An administrator wants to enforce that all SSL/TLS connections to external sites use a minimum of TLS 1.2. Which FortiGate feature enforces this requirement?

Accepted Answer

SSL/SSH inspection profile with minimum TLS version setting

Answer

SSL/SSH inspection profiles allow administrators to configure minimum and maximum TLS version requirements, blocking connections that don't meet the threshold.

Question 3

When implementing a least-privilege firewall policy, which FortiGate practice best represents this principle?

Accepted Answer

Creating specific source/destination/service policies and ending with an implicit deny

Answer

Least privilege requires explicitly allowing only necessary traffic with specific criteria, with all other traffic denied by the implicit deny rule at the bottom.

Question 4

FortiAnalyzer's compliance reports map log data to which framework when generating SOX compliance evidence?

Accepted Answer

COBIT control objectives

Answer

FortiAnalyzer includes built-in SOX compliance reports that map collected log data to COBIT control objectives for financial system audit evidence.

Question 5

An administrator must ensure FortiGate policies are reviewed quarterly. Which FortiManager workflow feature helps enforce this review process?

Accepted Answer

Approval workflow requiring dual administrator sign-off

Answer

FortiManager's approval workflow requires designated administrators to review and approve policy changes before installation, supporting periodic review processes.

(FCP) Fortinet Certified Professional Security Operations Practice Test

(FCP) Fortinet Certified Professional Security Operations Practice Test

FCP Security Policy Management & Compliance 3