Fortinet Fortinet Certifications NSE5 Questions & Answers

• Question 271:

  In a High Availability configuration operating in Active-Active mode, which of the following correctly describes the path taken by a load-balanced HTTP session?

  A. Request: Internal Host -> Master FG -> Slave FG -> Internet -> Web Server

  B. Request: Internal Host -> Master FG -> Slave FG -> Master FG -> Internet -> Web Server

  C. Request: Internal Host -> Slave FG -> Internet -> Web Server

  D. Request: Internal Host -> Slave FG -> Master FG -> Internet -> Web Server

  Correct Answer: A

• Question 272:

  Which of the following options can you use to update the virus definitions on a FortiGate unit? (Select all that apply.)

  A. Push update

  B. Scheduled update

  C. Manual update

  D. FTP update

  Correct Answer: ABC

• Question 273:

  What is `hot swapping'?

  A. Hot swapping means administrators can configure FortiAnalyzer to write to all hard drives in the device in order to make the array fault tolerant.

  B. Hot swapping means administrators can replace a failed disk on devices that support software RAID while the device is still running.

  C. Hot swapping means administrators can ensure the parity data of a redundant drive is valid while the device is still running.

  D. Hot swapping means administrators can replace a failed disk on devices that support hardware RAID while the device is still running.

  Correct Answer: D

• Question 274:

  Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.)

  A. Forward-only

  B. Non-recursive

  C. Recursive

  D. Iterative

  E. Conditional-forward

  Correct Answer: ABC

• Question 275:

  Which of the following DLP actions will always be performed if it is selected?

  A. Archive

  B. Quarantine Interface

  C. Ban Sender

  D. Block

  E. None

  F. Ban

  G. Quarantine IP Address

  Correct Answer: A

• Question 276:

  Which of the following items is NOT a packet characteristic matched by a firewall service object?

  A. ICMP type and code

  B. TCP/UDP source and destination ports

  C. IP protocol number

  D. TCP sequence number

  Correct Answer: D

• Question 277:

  When backing up the configuration file on a FortiGate unit, the contents can be encrypted by enabling the encrypt option and supplying a password.

  If the password is forgotten, the configuration file can still be restored using which of the following methods?

  A. Selecting the recover password option during the restore process.

  B. Having the password emailed to the administrative user by selecting the Forgot Password option.

  C. Sending the configuration file to Fortinet Support for decryption.

  D. If the password is forgotten, there is no way to use the file.

  Correct Answer: D

• Question 278:

  An administrator logs into a FortiGate unit using an account which has been assigned a super_admin profile. Which of the following operations can this administrator perform?

  A. They can delete logged-in users who are also assigned the super_admin access profile.

  B. They can make changes to the super_admin profile.

  C. They can delete the admin account if the default admin user is not logged in.

  D. They can view all the system configuration settings but can not make changes.

  E. They can access configuration options for only the VDOMs to which they have been assigned.

  Correct Answer: C

• Question 279:

  An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet.

  What must the user have for a successful authentication? (Select all that apply.)

  A. An entry in a supported LDAP Directory.

  B. A digital certificate issued by any CA server.

  C. A valid username and password.

  D. A digital certificate issued by the FortiGate unit.

  E. Membership in a firewall user group.

  Correct Answer: BE

• Question 280:

  Which of the following must be configured on a FortiGate unit to redirect content requests to remote web cache servers?

  A. WCCP must be enabled on the interface facing the Web cache.

  B. You must enabled explicit Web-proxy on the incoming interface.

  C. WCCP must be enabled as a global setting on the FortiGate unit.

  D. WCCP must be enabled on all interfaces on the FortiGate unit through which HTTP traffic is passing.

  Correct Answer: A