Fortinet Fortinet Certifications NSE5 Questions & Answers

• Question 161:

  What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)

  A. Enable session pick-up.

  B. Only applies to connections handled by a proxy.

  C. Only applies to UDP and ICMP connections.

  D. Connections must not be handled by a proxy.

  Correct Answer: AD

• Question 162:

  What is the purpose of locking an ADOM revision?

  A. To prevent further changes from Device Manager.

  B. To disable revision history.

  C. To prevent auto deletion.

  D. To lock the Policy and Objects tab.

  Correct Answer: A

• Question 163:

  Which of the following statements are correct regarding logging to memory on a FortiGate unit? (Select all that apply.)

  A. When the system has reached its capacity for log messages, the FortiGate unit will stop logging to memory.

  B. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.

  C. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.

  D. None of the above.

  Correct Answer: BC

• Question 164:

  Selecting Create New, as shown in the exhibit, will result in what?

  

  A. A new policy package.

  B. A new policy folder.

  C. A clone of the policy package.

  D. A new policy in the policy package.

  Correct Answer: D

• Question 165:

  A FortiGate unit is operating in NAT/Route mode and is configured with two Virtual LAN (VLAN) sub-interfaces added to the same physical interface.

  Which of the following statements is correct regarding the VLAN IDs in this scenario?

  A. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.

  B. The two VLAN sub-interfaces must have different VLAN IDs.

  C. The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs.

  D. The two VLAN sub-interfaces can have the same VLAN ID if they are connected to different L2 IEEE 802.1Q compliant switches.

  Correct Answer: B

• Question 166:

  Which statement is correct regarding virus scanning on a FortiGate unit?

  A. Virus scanning is enabled by default.

  B. Fortinet Customer Support enables virus scanning remotely for you.

  C. Virus scanning must be enabled in a UTM security profile and the UTM security profile must be assigned to a firewall policy.

  D. Enabling virus scanning in a UTM security profile enables virus scanning for all traffic flowing through the FortiGate device.

  Correct Answer: C

• Question 167:

  In HA, the option Reserve Management Port for Cluster Member is selected as shown in the Exhibit below.

  

  Which of the following statements are correct regarding this setting? (Select all that apply.)

  A. Interface settings on port7 will not be synchronized with other cluster members.

  B. The IP address assigned to this interface must not overlap with the IP address subnet assigned to another interface.

  C. Port7 appears in the routing table.

  D. A gateway address may be configured for port7.

  E. When connecting to port7 you always connect to the master device.

  Correct Answer: AD

• Question 168:

  Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

  A. The available actions for URL Filtering are Allow and Block.

  B. Multiple URL Filter lists can be added to a single Web filter profile.

  C. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

  D. The available actions for URL Filtering are Allow, Block and Exempt.

  Correct Answer: D

• Question 169:

  A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit.

  

  Which of the following statements are correct regarding these VDOMs? (Select all that apply.)

  A. The FortiGate unit supports any combination of these VDOMs in NAT/Route and Transparent modes.

  B. The FortiGate unit must be a model 1000 or above to support multiple VDOMs.

  C. A license had to be purchased and applied to the FortiGate unit before VDOM mode could be enabled.

  D. All VDOMs must operate in the same mode.

  E. Changing a VDOM operational mode requires a reboot of the FortiGate unit.

  F. An admin account can be assigned to one VDOM or it can have access to all three VDOMs.

  Correct Answer: AF

• Question 170:

  A FortiGate unit is configured with multiple VDOMs. An administrative account on the device has been assigned a Scope value of VDOM:root.

  Which of the following items would an administrator logging in using this account NOT be able to configure?

  A. Firewall addresses

  B. DHCP servers

  C. FortiGuard Distribution Network configuration

  D. PPTP VPN configuration

  Correct Answer: C