Fortinet Fortinet Certifications NSE5 Questions & Answers

• Question 201:

  Which of the following statements are correct regarding Application Control?

  A. Application Control is based on the IPS engine.

  B. Application Control is based on the AV engine.

  C. Application Control can be applied to SSL encrypted traffic.

  D. Application Control cannot be applied to SSL encrypted traffic.

  Correct Answer: AC

• Question 202:

  Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.)

  A. Firewall

  B. Directory Service

  C. Local

  D. LDAP

  E. PKI

  Correct Answer: AB

• Question 203:

  Examine the firewall configuration shown below; then answer the question following it.

  

  Which of the following statements are correct based on the firewall configuration illustrated in the exhibit? (Select all that apply.)

  A. A user can access the Internet using only the protocols that are supported by user authentication.

  B. A user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP. These require authentication before the user will be allowed access.

  C. A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access any services.

  D. A user cannot access the Internet using any protocols unless the user has passed firewall authentication.

  Correct Answer: AD

• Question 204:

  UTM features can be applied to which of the following items?

  A. Firewall policies

  B. User groups

  C. Policy routes

  D. Address groups

  Correct Answer: A

• Question 205:

  Which of the following pieces of information can be included in the Destination Address field of a firewall policy?

  A. An IP address pool, a virtual IP address, an actual IP address, and an IP address group.

  B. A virtual IP address, an actual IP address, and an IP address group.

  C. An actual IP address and an IP address group.

  D. Only an actual IP address.

  Correct Answer: B

• Question 206:

  Which of the following statements are true of the FortiGate unit's factory default configuration?

  A. `Port1' or `Internal' interface will have an IP of 192.168.1.99.

  B. `Port1' or `Internal' interface will have a DHCP server set up and enabled (on devices that support DHCP Servers).

  C. Default login will always be the username: admin (all lowercase) and no password.

  D. The implicit firewall action is ACCEPT.

  Correct Answer: ABC

• Question 207:

  Review the static route configuration for IPsec shown in the Exhibit below; then answer the question following it.

  

  Which of the following statements are correct regarding this configuration? (Select all that apply).

  A. Remote_1 is a Phase 1 object with interface mode enabled

  B. The gateway address is not required because the interface is a point-to-point connection

  C. The gateway address is not required because the default route is used

  D. Remote_1 is a firewall zone

  Correct Answer: AB

• Question 208:

  How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)

  A. File Type. Microsoft Office(msoffice)

  B. File Type. Archive(zip)

  C. File Type. Unknown Filetype(unknown)

  D. File Name. "*.ppt", "*.doc", "*.xls"

  E. File Name. "*.pptx", "*.docx", "*.xlsx"

  Correct Answer: BE

• Question 209:

  Which of the following spam filtering methods are supported on the FortiGate unit? (Select all that apply.)

  A. IP Address Check

  B. Open Relay Database List (ORDBL)

  C. Black/White List

  D. Return Email DNS Check

  E. Email Checksum Check

  Correct Answer: ABCDE

• Question 210:

  A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit.

  

  Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data to the FortiAnalyzer unit?

  A. The FortiGate unit is considered an unregistered device.

  B. The FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the administrator.

  C. The FortiGate unit has insufficient privileges. The administrator should edit the device entry in the FortiAnalyzer and modify the privileges.

  D. The FortiGate unit is being treated as a syslog device and is only permitted to send log data.

  Correct Answer: A