Fortinet FCNSA Actual Free Exam Questions & Community Discussion

Exam Code/Number: FCNSA
Exam Name/Title: fortinet certified network security administrator
Certification Provider: Fortinet
Corresponding Certification: Fortinet Certification

Exam Questions: 73
Updated On: May 30, 2026

Question #33

Which of the following products is designed to manage multiple FortiGate devices?

A. FortiAnalyzer

B. FortiManager

C. FortiClient

D. FortiMail

E. FortiGate

F. FortiBridge

Discussion 0

Correct Answer: B Vote an answer

Question #34

Which of the following statements are correct regarding logging to memory on a FortiGate unit? (Select all that apply.)

A. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.

B. When the system has reached its capacity for log messages, the FortiGate unit will stop logging to memory.

C. None of the above.

D. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.

Discussion 0

Correct Answer: A,D Vote an answer

Question #35

Which of the following are valid components of the Fortinet Server Authentication Extensions (FSAE)? (Select all that apply.)

A. Domain Local Security Agent.

B. Collector Agent.

C. Active Directory Agent.

D. User Authentication Agent.

E. Domain Controller Agent.

Discussion 0

Correct Answer: B,E Vote an answer

Question #36

UTM features can be applied to which of the following items?

A. Address groups

B. Policy routes

C. User groups

D. Firewall policies

Discussion 0

Correct Answer: D Vote an answer

Question #37

How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

A. A route back to the client is automatically created on the FortiGate to match the SSLVPN IP pool from which the IP address assignment was made.

B. The FortiGate adds a route based upon the destination address in the SSL VPN firewall policy.

C. A static route must be configured by the administrator using the ssl.root interface as the outgoing interface.

D. Assignment of an IP address causes a host route to be added to the FortiGate routing table.

Discussion 0

Correct Answer: C Vote an answer

Question #38

Which of the following authentication types are supported by FortiGate units? (Select all that apply.)

A. LDAP

B. RADIUS

C. Local Users

D. Kerberos

Discussion 0

Correct Answer: A,B,C Vote an answer

Question #39

A FortiGate unit can act as which of the following? (Select all that apply.)

A. Antispam filter

B. VPN gateway

C. Mail relay

D. Mail server

E. Firewall

Discussion 0

Correct Answer: A,B,E Vote an answer

Question #40

The Idle Timeout setting on a FortiGate unit applies to which of the following?

A. User authentication

B. Web browsing

C. FTP connections

D. Web filtering overrides.

E. Administrator access

Discussion 0

Correct Answer: E Vote an answer

Download Free Fortinet FCNSA Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet FCNSA exam.