Fortinet Fortinet Certifications NSE5 Questions & Answers

• Question 131:

  Identify the statement which correctly describes the output of the following command:

  diagnose ips anomaly list

  A. Lists the configured DoS policy.

  B. List the real-time counters for the configured DoS policy.

  C. Lists the errors captured when compiling the DoS policy.

  Correct Answer: B

• Question 132:

  When configuring a server load balanced virtual IP, which of the following is the best distribution algorithm to be used in applications where the same physical destination server must be maintained between

  sessions?

  A. Static

  B. Round robin

  C. Weighted round robin

  D. Least connected

  Correct Answer: A

• Question 133:

  Which of the following statements are true regarding Local User Authentication? (Select all that apply.)

  A. Local user authentication is based on usernames and passwords stored locally on the FortiGate unit.

  B. Two-factor authentication can be enabled on a per user basis.

  C. Administrators can create an account for the user locally and specify the remote server to verify the password.

  D. Local users are for administration accounts only and cannot be used for identity policies.

  Correct Answer: ABC

• Question 134:

  Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

  A. The FortiGate unit requires only a single IP address for receiving updates and configuring from a management computer.

  B. The FortiGate unit must use public IP addresses on both the internal and external networks.

  C. The FortiGate unit commonly uses private IP addresses on the internal network but hides them using network address translation.

  D. The FortiGate unit uses only DHCP-assigned IP addresses on the internal network.

  Correct Answer: C

• Question 135:

  Which ports are commonly used by FortiManager? (Choose two.)

  A. TCP 541 for remote management of a FortiGate unit.

  B. TCP 5199 HA heartbeat or synchronization (FortiManager HA cluster).

  C. TCP 703 HA heartbeat or synchronization (FortiManager HA cluster).

  D. TCP 514 for remote management of a FortiGate unit.

  Correct Answer: AB

• Question 136:

  In order to load-share traffic using multiple static routes, the routes must be configured with ...

  A. the same distance and same priority.

  B. the same distance and the same weight.

  C. the same distance but each of them must be assigned a unique priority.

  D. a distance equal to its desired weight for ECMP but all must have the same priority.

  Correct Answer: A

• Question 137:

  A FortiGate administrator configures a Virtual Domain (VDOM) for a new customer. After creating the VDOM, the administrator is unable to reassign the dmz interface to the new VDOM as the option is greyed out in Web Config in the management VDOM.

  What would be a possible cause for this problem?

  A. The dmz interface is referenced in the configuration of another VDOM.

  B. The administrator does not have the proper permissions to reassign the dmz interface.

  C. Non-management VDOMs can not reference physical interfaces.

  D. The dmz interface is in PPPoE or DHCP mode.

  E. Reassigning an interface to a different VDOM can only be done through the CLI.

  Correct Answer: A

• Question 138:

  When creating administrative users, the assigned _____________determines user rights on the FortiGate unit.

  A. access profile

  Correct Answer: A

• Question 139:

  A FortiGate unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received.

  Which of the following statements are possible reasons for this? (Select all that apply.)

  A. The external facing interface of the FortiGate unit is configured to use DHCP.

  B. The FortiGate unit has not been registered.

  C. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network and no override push IP is configured.

  D. The FortiGate unit is in Transparent mode which does not support push updates.

  Correct Answer: ABC

• Question 140:

  SSL content inspection is enabled on the FortiGate unit. Which of the following steps is required to prevent a user from being presented with a web browser warning when accessing an SSL-encrypted website?

  A. The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the user's workstation.

  B. Disable the strict server certificate check in the web browser under Internet Options.

  C. Enable transparent proxy mode on the FortiGate unit.

  D. Enable NTLM authentication on the FortiGate unit. NTLM authentication suppresses the certificate warning messages in the web browser.

  Correct Answer: A