Fortinet FCNSA Actual Free Exam Questions & Community Discussion

Exam Code/Number: FCNSA
Exam Name/Title: fortinet certified network security administrator
Certification Provider: Fortinet
Corresponding Certification: Fortinet Certification

Exam Questions: 73
Updated On: May 30, 2026

Question #25

Caching improves performance by reducing FortiGate unit requests to the FortiGuard server.
Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.)

A. When the cache is full, the least recently used IP address or URL is deleted from the cache.

B. The cache uses a small portion of the FortiGate system memory.

C. An administrator can configure the number of seconds to store information in the cache before the FortiGate unit contacts the FortiGuard server again.

D. The size of the cache will increase to accomodate any number of cached queries.

E. Caching is available for web filtering, antispam, and IPS requests.

Discussion 0

Correct Answer: A,B,C Vote an answer

Question #26

If a FortiGate unit has a dmz interface IP address of 210.192.168.2 with a subnet mask of 255.255.255.0, what is a valid dmz DHCP addressing range?

A. 172.168.0.1 - 172.168.0.10

B. 210.192.168.3 - 210.192.168.10

C. All of the above.

D. 210.192.168.1 - 210.192.168.4

Discussion 0

Correct Answer: B Vote an answer

Question #27

Which of the following Fortinet products can receive updates from the FortiGuard Distribution Network? (Select all that apply.)

A. FortiAnalyzer

B. FortiClient

C. FortiMail

D. FortiGate

Discussion 0

Correct Answer: B,C,D Vote an answer

Question #28

You wish to create a firewall policy that applies only to traffic intended for your web server. The server has an IP address of 192.168.2.2 and belongs to a class C subnet.
When defining the firewall address for use in this policy, which one of the following addressing formats is correct?

A. 192.168.2.0 / 255.255.255.255

B. 192.168.2.2 / 255.255.255.0

C. 192.168.2.2 / 255.255.255.255

D. 192.168.2.0 / 255.255.255.0

Discussion 0

Correct Answer: C Vote an answer

Question #29

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block.
Which of the following statements regarding overrides are correct? (Select all that apply.)

A. Overrides can be allowed by the administrator for a specific period of time.

B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.

C. A protection profile may have only one user group defined as an override group.

D. Authentication to allow the override is based on a user's membership in a user group.

Discussion 0

Correct Answer: A,B,D Vote an answer

Question #30

Which of the following products provides dedicated hardware to analyze log data from multiple FortiGate devices?

A. FortiAnalyzer

B. FortiManager

C. FortiClient

D. FortiMail

E. FortiGate

F. FortiBridge

Discussion 0

Correct Answer: A Vote an answer

Question #31

Which of the following products can be installed on a computer running Windows XP to provide personal firewall protection, antivirus protection, web and mail filtering, spam filtering, and VPN functionality?

A. FortiAnalyzer

B. FortiManager

C. FortiClient

D. FortiGate

E. FortiReporter

Discussion 0

Correct Answer: C Vote an answer

Question #32

Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

A. Multiple URL Filter lists can be added to a single Web filter profile.

B. The available actions for URL Filtering are Allow, Block and Exempt.

C. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

D. The available actions for URL Filtering are Allow and Block.

Discussion 0

Correct Answer: B Vote an answer

Download Free Fortinet FCNSA Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet FCNSA exam.