Fortinet FCNSA Actual Free Exam Questions & Community Discussion

Exam Code/Number: FCNSA
Exam Name/Title: fortinet certified network security administrator
Certification Provider: Fortinet
Corresponding Certification: Fortinet Certification

Exam Questions: 73
Updated On: Aug 10, 2026

Question #1

Because changing the operational mode to Transparent resets device (or vdom) to all defaults, which precautions should an Administrator take prior to performing this? (Select all that apply.)

A. Backup the configuration.

B. Set the unit to factory defaults.

C. Update IPS and AV files.

D. Disconnect redundant cables to ensure the topology will not contain layer 2 loops.

Discussion 0

Correct Answer: A,D Vote an answer

Question #2

In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel between two separate private networks.
Which of the following configuration steps must be performed on both FortiGate units to support this configuration? (Select all that apply.)

A. Configure the appropriate user groups on the Fortigate units to allow users access to the IPSec VPN connection.

B. Create firewall policies to control traffic between the IP source and destination address.

C. Define the Phase 1 parameters that the FortiGate unit needs to authenticate the remote peers.

D. Set the operating mode of the FortiGate unit to IPSec VPN mode.

E. Define the Phase 2 parameters that the FortiGate unit needs to create a VPN tunnel with the remote peer.

Discussion 0

Correct Answer: B,C,E Vote an answer

Question #3

Which of the following logging options are supported on a FortiGate unit? (Select all that apply.)

A. LDAP

B. FortiAnalyzer

C. Local

D. Syslog

Discussion 0

Correct Answer: B,C,D Vote an answer

Question #4

A FortiGate 100 unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received.
Which of the following statements are possible reasons for this? (Select all that apply.)

A. The FortiGate unit is in Transparent mode.

B. The FortiGate unit has not been registered.

C. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network.

D. The external facing interface of the FortiGate unit is configured to use DHCP.

Discussion 0

Correct Answer: B,C,D Vote an answer

Question #5

Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function.
An administrator must assign a set of UTM features to a group of users.
Which of the following is the correct method for doing this?

A. The administrator must apply the UTM features directly to a user object.

B. When defining the UTM objects, the administrator must list the user groups which will use the UTM object.

C. The administrator must enable the UTM features in an identify-based policy applicable to the user group.

D. Enable a set of unique UTM features under "Edit User Group".

Discussion 0

Correct Answer: C Vote an answer

Question #6

Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

A. The FortiGate unit commonly uses private IP addresses on the internal network but hides them using network address translation.

B. The FortiGate unit requires only a single IP address for receiving updates and configuring from a management computer.

C. The FortiGate unit must use public IP addresses on both the internal and external networks.

D. The FortiGate unit uses only DHCP-assigned IP addresses on the internal network.

Discussion 0

Correct Answer: A Vote an answer

Question #7

FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed.
What action must be taken for one of these profiles to become active?

A. The protection profile must be assigned to a firewall policy.

B. The protection profile must be set as the Active Protection Profile.

C. All of the above.

D. The "Use Protection Profile" option must be selected in the Web Config tool under the sections for AntiVirus, IPS, WebFilter, and AntiSpam.

Discussion 0

Correct Answer: A Vote an answer

Question #8

Which of the following spam filtering methods are supported on the FortiGate unit? (Select all that apply.)

A. Black/White list.

B. Open Relay Database List (ORDBL).

C. Return email DNS check.

D. IP address check.

E. Email checksum check.

Discussion 0

Correct Answer: A,B,C,D,E Vote an answer

Download Free Fortinet FCNSA Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet FCNSA exam.