Fortinet Fortinet Certifications NSE5 Questions & Answers

• Question 171:

  In order to match an identity-based policy, the FortiGate unit checks the IP information. Once inside the policy, the following logic is followed:

  A. First, a check is performed to determine if the user's login credentials are valid. Next, the user is checked to determine if they belong to any of the groups defined for that policy. Finally, user restrictions are determined and port, time, and UTM profiles are applied.

  B. First, user restrictions are determined and port, time, and UTM profiles are applied. Next, a check is performed to determine if the user's login credentials are valid. Finally, the user is checked to determine if they belong to any of the groups defined for that policy.

  C. First, the user is checked to determine if they belong to any of the groups defined for that policy. Next, user restrictions are determined and port, time, and UTM profiles are applied. Finally, a check is performed to determine if the user's login credentials are valid.

  Correct Answer: A

• Question 172:

  Which of the following statements regarding Banned Words are correct? (Select all that apply.)

  A. The FortiGate unit can scan web pages and email messages for instances of banned words.

  B. When creating a banned word list, an administrator can indicate either specific words or patterns.

  C. Banned words can be expressed as wildcards or regular expressions.

  D. Content is automatically blocked if a single instance of a banned word appears.

  E. The FortiGate unit includes a pre-defined library of common banned words.

  Correct Answer: ABC

• Question 173:

  Which two statements are correct regarding the "Import all Objects" setting in the import policy wizard? (Choose two.)

  A. All used and unused objects will be imported into the ADOM object database.

  B. Only used objects will be imported into the ADOM object database.

  C. FortiManager allows only policy dependent objects to be imported into an ADOM object database.

  D. Any unused object on the FortiGate device will be deleted with the first policy install from FortiManager.

  Correct Answer: AD

• Question 174:

  Which statement is correct? FortiAnalyzer collects and aggregates log data from:

  A. Any supported device it is configured to monitor.

  B. FortiGate devices only.

  C. FortiAnalyzer's operating in collector mode only.

  D. Any supported device it is configured to monitor, as long as it's not in the wide area network (WAN).

  Correct Answer: D

• Question 175:

  Review the output of the command config router ospf shown in the Exhibit below; then answer the question following it.

  

  Which one of the following statements is correct regarding this output?

  A. OSPF Hello packets will only be sent on interfaces configured with the IP addresses 172.16.1.1 and

  172.16.1.2.

  B. OSPF Hello packets will be sent on all interfaces of the FortiGate device.

  C. OSPF Hello packets will be sent on all interfaces configured with an address matching the 10.0.1.0/24 and 172.16.0.0/12 networks.

  D. OSPF Hello packets are not sent on point-to-point networks.

  Correct Answer: C

• Question 176:

  You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You have chosen to use Interface Mode when configuring the VPN tunnel and you want users from either side to be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate unit already has a default route.

  Which of the following configuration steps are required to achieve these objectives? (Select all that apply.)

  A. Create one firewall policy.

  B. Create two firewall policies.

  C. Add a route for the remote subnet.

  D. Add a route for incoming traffic.

  E. Create a phase 1 definition.

  F. Create a phase 2 definition.

  Correct Answer: BCEF

• Question 177:

  Which of the following Fortinet products can receive updates from the FortiGuard Distribution Network? (Select all that apply.)

  A. FortiGate

  B. FortiClient

  C. FortiMail

  D. FortiAnalyzer

  Correct Answer: ABC

• Question 178:

  View the Exhibit.

  

  Refer to the exhibit. Which two statements are correct? (Choose two.)

  A. An ADOM revision is created specific to the policy package and object changes.

  B. An ADOM revision is created as a snapshot of all ADOM policy packages and objects.

  C. An ADOM revision is locked.

  D. An ADOM revision is unlocked.

  Correct Answer: AD

• Question 179:

  What are two of the key features of FortiAnalyzer? (Choose two.)

  A. Centralized log repository

  B. Cloud-based management

  C. Reports

  D. Virtual domains (VDOMs)

  Correct Answer: AC

• Question 180:

  Which of the following antivirus and attack definition update features are supported by FortiGate units? (Select all that apply.)

  A. Manual, user-initiated updates from the FortiGuard Distribution Network.

  B. Hourly, daily, or weekly scheduled antivirus and attack definition and antivirus engine updates from the FortiGuard Distribution Network.

  C. Push updates from the FortiGuard Distribution Network.

  D. Update status including version numbers, expiry dates, and most recent update dates and times.

  Correct Answer: ABCD