Fortinet FCNSA Actual Free Exam Questions & Community Discussion

Exam Code/Number: FCNSA
Exam Name/Title: fortinet certified network security administrator
Certification Provider: Fortinet
Corresponding Certification: Fortinet Certification

Exam Questions: 73
Updated On: May 30, 2026

Question #17

The command structure of the CLI on a FortiGate unit consists of commands, objects, branches, tables and parameters.
Which of the following items describes port1?

A. A command.

B. A parameter.

C. An object.

D. A table.

Discussion 0

Correct Answer: D Vote an answer

Question #18

An administrator configures a FortiGate unit in Transparent mode on the 192.168.11.0 subnet. Automatic Discovery is enabled to detect any available FortiAnalyzers on the network.
Which of the following FortiAnalyzers will be detected? (Select all that apply.)

A. 192.168.11.100

B. 192.168.11.251

C. 192.168.10.100

D. 192.168.10.251

Discussion 0

Correct Answer: A,B Vote an answer

Question #19

Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.)

A. LDAP

B. Directory Service

C. PKI

D. Local

E. Firewall

Discussion 0

Correct Answer: B,E Vote an answer

Question #20

SSL content inspection is enabled on the FortiGate unit. Which of the following steps is required to prevent a user from being presented with a web browser warning when accessing an SSL-encrypted website?

A. Disable the strict server certificate check in the web browser under Internet Options.

B. Enable NTLM authentication on the FortiGate unit. NTLM authentication suppresses the certificate warning messages in the web browser.

C. Enable transparent proxy mode on the FortiGate unit.

D. The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the user's workstation.

Discussion 0

Correct Answer: D Vote an answer

Question #21

Which of the following statements regarding Banned Words are correct? (Select all that apply.)

A. The FortiGate unit can scan web pages and email messages for instances of banned words.

B. When creating a banned word list, an administrator can indicate either specific words or patterns.

C. The FortiGate unit includes a pre-defined library of common banned words.

D. Content is automatically blocked if a single instance of a banned word appears.

E. Banned words can be expressed as wildcards or regular expressions.

Discussion 0

Correct Answer: A,B,E Vote an answer

Question #22

An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet.
What must the user have for a successful authentication? (Select all that apply.)

A. A digital certificate issued by the FortiGate unit.

B. Membership in a firewall user group.

C. A digital certificate issued by any CA server.

D. A valid username and password.

E. An entry in a supported LDAP Directory.

Discussion 0

Correct Answer: B,C Vote an answer

Question #23

Which statement is correct regarding virus scanning on a FortiGate unit?

A. Enabling virus scanning in a protection profile enables virus scanning for all traffic flowing through the FortiGate.

B. Virus scanning is enabled by default.

C. Fortinet Customer Support enables virus scanning remotely for you.

D. Virus scanning must be enabled in a protection profile and the protection profile must be assigned to a firewall policy.

Discussion 0

Correct Answer: D Vote an answer

Question #24

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block.
Which of the following statements regarding overrides is NOT correct?

A. Overrides can be allowed by the administrator for a specific period of time.

B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.

C. When requesting an override, the matched user must belong to a user group for which the override capabilty has been enabled.

D. A web filter profile may only have one user group defined as an override group.

Discussion 0

Correct Answer: D Vote an answer

Download Free Fortinet FCNSA Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet FCNSA exam.