Fortinet FCNSP.v5 Actual Free Exam Questions & Community Discussion

Exam Code/Number: FCNSP.v5
Exam Name/Title: Fortinet Certified Network Security Professional (FCNSP.v5)
Certification Provider: Fortinet
Corresponding Certification: Fortinet Certification

Exam Questions: 120
Updated On: Sep 26, 2026

Question #1

Which of the following tasks fall under the responsibility of the SSL proxy in a typical HTTPS connection? (Select all that apply.)

A. The web server SSL handshake.

B. Communication with the urlfilter process.

C. The web client SSL handshake.

D. File buffering.

Discussion 0

Correct Answer: A,C Vote an answer

Question #2

Examine the Exhibit shown below; then answer the question following it.

The Vancouver FortiGate unit initially had the following information in its routing table:
S 172.20.0.0/16 [10/0] via 172.21.1.2, port2 C 172.21.0.0/16 is directly connected, port2 C 172.11.11.0/24 is directly connected, port1
Afterwards, the following static route was added:
config router static edit 6 set dst 172.20.1.0 255.255.255.0 set pririoty 0 set device port1 set gateway 172.11.12.1
next end
Since this change, the new static route is NOT showing up in the routing table. Given the information provided, which of the following describes the cause of this problem?

A. The priority is 0, which means that the route will remain inactive.

B. The subnet 172.20.1.0/24 is overlapped with the subnet of one static route that is already in the routing table (172.20.0.0/16), so, we need to enable allow-subnet-overlap first.

C. The static route configuration is missing the distance setting.

D. The 'gateway' IP address is NOT in the same subnet as the IP address of port1.

Discussion 0

Correct Answer: D Vote an answer

Question #3

When the SSL proxy inspects the server certificate for Web Filtering only in SSL Handshake mode, which certificate field is being used to determine the site rating?

A. Validity

B. Serial Number

C. Common Name

D. Organizational Unit

E. Organization

Discussion 0

Correct Answer: C Vote an answer

Question #4

The FortiGate Server Authentication Extensions (FSAE) provide a single sign on solution to authenticate users transparently to a FortiGate unit using credentials stored in Windows Active Directory.
Which of the following statements are correct regarding FSAE in a Windows domain environment when NTLM is not used? (Select all that apply.)

A. For non-domain computers, an FSAE client must be installed on the computer to allow FSAE authentication.

B. An FSAE Domain Controller Agent must be installed on every domain controller.

C. The FSAE Collector Agent will retrieve user information from the Domain Controller Agent and will send the user logon information to the FortiGate unit.

D. The FSAE Domain Controller Agent will regularly update user logon information on the FortiGate unit.

E. An FSAE Collector Agent must be installed on every domain controller.

Discussion 0

Correct Answer: B,C Vote an answer

Question #5

What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)

A. Enable session pick-up.

B. Only applies to connections handled by a proxy.

C. Only applies to UDP and ICMP connections.

D. Connections must not be handled by a proxy.

Discussion 0

Correct Answer: A,D Vote an answer

Question #6

In HA, the option Reserve Management Port for Cluster Member is selected as shown in the Exhibit below.

Which of the following statements are correct regarding this setting? (Select all that apply.)

A. Port7 appears in the routing table.

B. A gateway address may be configured for port7.

C. The IP address assigned to this interface must not overlap with the IP address subnet assigned to another interface.

D. Interface settings on port7 will not be synchronized with other cluster members.

E. When connecting to port7 you always connect to the master device.

Discussion 0

Correct Answer: B,D Vote an answer

Question #7

Which of the following statements are correct regarding virtual domains (VDOMs)? (Select all that apply.)

A. VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units.

B. Only administrative users with a 'super_admin' profile will be able to enter multiple VDOMs to make configuration changes.

C. VDOMs share firmware versions, as well as antivirus and IPS databases.

D. A management VDOM handles SNMP, logging, alert email, and FDN-based updates.

Discussion 0

Correct Answer: A,C,D Vote an answer

Question #8

A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit.

Which of the following statements are true if the network administrator wants to route traffic between all the VDOMs? (Select all that apply.)

A. As with all FortiGate unit interfaces, firewall policies must be in place for traffic to be allowed to pass through any interface, including inter-VDOM links. This provides the same level of security internally as externally.

B. This configuration requires the use of an external router.

C. The administrator should configure inter-VDOM links to avoid using external interfaces and routers.

D. As each VDOM has an independant routing table, routing rules need to be set (for example, static routing, OSPF) in each VDOM to route traffic between VDOMs.

E. Inter-VDOM routing is automatically provided if all the subnets that need to be routed are locally attached.

Discussion 0

Correct Answer: A,C,D Vote an answer

Download Free Fortinet FCNSP.v5 Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet FCNSP.v5 exam.