Fortinet Fortinet Certifications NSE5 Questions & Answers

• Question 151:

  The default administrator profile that is assigned to the default "admin" user on a FortGate device is: __________ .

  A. trusted-admin

  B. super_admin

  C. super_user

  D. admin

  E. fortinet-root

  Correct Answer: B

• Question 152:

  The following diagnostic output is displayed in the CLI: diag firewall auth list policy iD. 9, srC. 192.168.3.168, action: accept, timeout: 13427 user: forticlient_chk_only, group: flag (80020): auth timeout_ext, flag2 (40): exact group iD. 0, av group: 0 ----- 1 listed, 0 filtered -----Based on this output, which of the following statements is correct?

  A. Firewall policy 9 has endpoint compliance enabled but not firewall authentication.

  B. The client check that is part of an SSL VPN connection attempt failed.

  C. This user has been associated with a guest profile as evidenced by the group id of 0.

  D. An auth-keepalive value has been enabled.

  Correct Answer: A

• Question 153:

  What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

  A. All FortiGates can send logs to FortiAnalyzer using the store and upload option.

  B. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.

  C. Both secure communications methods (SSL and IPsec) allow the store and upload option.

  D. Disk logging is enabled on the FortiGate through the CLI only.

  E. Disk logging is enabled by default on the FortiGate.

  Correct Answer: BCD

• Question 154:

  Each UTM feature has configurable UTM objects such as sensors, profiles or lists that define how the feature will function. How are UTM features applied to traffic?

  A. One or more UTM features are enabled in a firewall policy.

  B. In the system configuration for that UTM feature, you can identify the policies to which the feature is to be applied.

  C. Enable the appropriate UTM objects and identify one of them as the default.

  D. For each UTM object, identify which policy will use it.

  Correct Answer: A

• Question 155:

  Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

  A. SSL is the default setting.

  B. SSL communications are auto-negotiated between the two devices.

  C. SSL can send logs in real-time only.

  D. SSL encryption levels are globally set on FortiAnalyzer.

  E. FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.

  Correct Answer: AD

• Question 156:

  Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

  A. The FortiGate unit applies NAT to all traffic.

  B. The FortiGate unit functions as a Layer 3 device.

  C. The FortiGate unit functions as a Layer 2 device.

  D. The FortiGate unit functions as a router and the firewall function is disabled.

  Correct Answer: B

• Question 157:

  Which of the following methods can be used to access the CLI? (Select all that apply.)

  A. By using a direct connection to a serial console.

  B. By using the CLI console window in Web Config.

  C. By using an SSH connection.

  D. By using a Telnet connection.

  Correct Answer: ABCD

• Question 158:

  Which statement is true regarding FortiAnalyzer models?

  A. All physical appliances can support the same number of GB per day of logs.

  B. Both physical and virtual appliances have same license file.

  C. All physical appliances have the same storage capacity.

  D. The virtual appliance license determines the number of devices supported and the amount of traffic can be collected.

  Correct Answer: D

• Question 159:

  Which statement correctly compares FortiManager physical and virtual appliances?

  A. Physical and virtual FortiManager appliances may manage unlimited devices and have unrestricted storage.

  B. Physical and virtual FortiManager appliances use licenses to increase managed device and storage capacity limits.

  C. Physical and virtual FortiManager appliances have an unrestricted daily logging rate.

  D. Physical and virtual FortiManager appliances use model types and licenses respectively, to differentiate managed device and storage capacity limits.

  Correct Answer: D

• Question 160:

  Which of the following statements is correct about how the FortiGate unit verifies username and password during user authentication?

  A. If a remote server is included in a user group, it will be checked before local accounts.

  B. An administrator can define a local account for which the password must be verified by querying a remote server.

  C. If authentication fails with a local password, the FortiGate unit will query the authentication server if the local user is configured with both a local password and an authentication server.

  D. The FortiGate unit will only attempt to authenticate against Active Directory if Fortinet Server Authentication Extensions are installed and configured.

  Correct Answer: B