Fortinet Fortinet Certifications NSE5 Questions & Answers

• Question 121:

  Which two statements are correct regarding FortiGate-FortiManager (FGFM) management protocol? (Choose two.)

  A. A secure communication is established between FortiManager and the managed device on port TCP

  541.

  B. A secure communication is established between FortiManager and the managed device on port TCP

  514.

  C. The FGFM daemons run on both FortiGate (fgfmd) and FortiManager (fgfmsd).

  D. Once the FortiGate is managed, the FGFM tunnel is authenticated and established using the IP address of FortiGate device.

  Correct Answer: AC

• Question 122:

  Which tabs are available on the FortiManager Web-based manager? (Choose two.)

  A. Device Manager

  B. Policy and Objects

  C. FortiGate

  D. Database

  Correct Answer: AB

• Question 123:

  Which of the following items represent the minimum configuration steps an administrator must perform to enable Data Leak Prevention for traffic flowing through the FortiGate unit? (Select all that apply.)

  A. Assign a DLP sensor in a firewall policy.

  B. Apply one or more DLP rules to a firewall policy.

  C. Enable DLP globally using the config sys dlp command in the CLI.

  D. Define one or more DLP rules.

  E. Define a DLP sensor.

  F. Apply a DLP sensor to a DoS sensor policy.

  Correct Answer: ADE

• Question 124:

  Review the configuration for FortiClient IPsec shown in the Exhibit below.

  

  Which of the following statements is correct regarding this configuration?

  A. The connecting VPN client will install a route to a destination corresponding to the STUDENT_INTERNAL address object

  B. The connecting VPN client will install a default route

  C. The connecting VPN client will install a route to the 172.20.1.[1-5] address range

  D. The connecting VPN client will connect in web portal mode and no route will be installed

  Correct Answer: A

• Question 125:

  Which of the following items are considered to be advantages of using the application control features on the FortiGate unit?

  Application control allows an administor to:

  A. set a unique session-ttl for select applications.

  B. customize application types in a similar way to adding custom IPS signatures.

  C. check which applications are installed on workstations attempting to access the network.

  D. enable AV scanning per application rather than per policy.

  Correct Answer: A

• Question 126:

  Which of the following report templates must be used when scheduling report generation?

  A. Layout Template

  B. Data Filter Template

  C. Output Template

  D. Chart Template

  Correct Answer: A

• Question 127:

  Which of the following features could be used by an administrator to block FTP uploads while still allowing FTP downloads?

  A. Anti-Virus File-Type Blocking

  B. Data Leak Prevention

  C. Network Admission Control

  D. FortiClient Check

  Correct Answer: B

• Question 128:

  Which of the following are FortiManager features? (Choose two.)

  A. Administrative Domains

  B. Virtual Domains

  C. Centralized Management

  D. Cloud-based Management

  Correct Answer: AC

• Question 129:

  Which email filter is NOT available on a FortiGate device?

  A. Sender IP reputation database.

  B. URLs included in the body of known SPAM messages.

  C. Email addresses included in the body of known SPAM messages.

  D. Spam object checksums.

  E. Spam grey listing.

  Correct Answer: E

• Question 130:

  Which of the following products provides dedicated hardware to analyze log data from multiple FortiGate devices?

  A. FortiGate device

  B. FortiAnalyzer device

  C. FortiClient device

  D. FortiManager device

  E. FortiMail device

  F. FortiBridge device

  Correct Answer: B