Fortinet Fortinet Certifications NSE5 Questions & Answers

• Question 311:

  Which two statements are correct regarding FortiGuard features on FortiManager? (Choose two.)

  A. FortiManager can function as a local FortiGuard Distribution Server (FDS).

  B. In FortiManager HA only master FortiManager can act as an FDS server.

  C. When FortiManager is configured for closed network operation, it can connect to public FDS servers to obtain managed device information and sync packages.

  D. FortiGuard information is not synchronized across a FortiManager cluster.

  Correct Answer: AB

• Question 312:

  Given the Antivirus and IPS update service is enabled, and the FortiGuard settings as shown in the exhibit. The desired behavior is for managed devices to use public servers for these updates should FortiManager become unreachable, which is not the case with the current configuration.

  What two actions are necessary to correct this? (Choose two.)

  

  A. Change the server override mode from strict to loose.

  B. Change the port from 8890 to 443 in the Use Override Server Address for FortiGate/FortiMail settings.

  C. Uncheck the option Use Override Server Address for FortiGate/FortiMail.

  D. Change the IP address to a public FDS server and port to 443 in the Use Override Server Address for FortiGate/FortiMail settings.

  Correct Answer: AC

• Question 313:

  A user created a firewall address object, as shown in the exhibit. This object is used in multiple policy packages for multiple FortiGate devices. When the install operation is performed, which two statements are correct for devices referencing this object? (Choose two.)

  

  A. The object installed on the BranchOffice FortiGate device will have a value of 10.0.1.0/24.

  B. The object installed on the BranchOffice FortiGate device will have a value of 192.168.1.0/24.

  C. If no dynamic mapping is defined, the object installed will have a value of 192.168.1.0/24.

  D. If no dynamic mapping is defined, the object will not be installed.

  Correct Answer: BC

• Question 314:

  Which of the following network protocols are supported for administrative access to a FortiGate unit?

  A. HTTPS, HTTP, SSH, TELNET, PING, SNMP

  B. FTP, HTTPS, NNTP, TCP, WINS

  C. HTTP, NNTP, SMTP, DHCP

  D. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS

  E. Telnet, UDP, NNTP, SMTP

  Correct Answer: A

• Question 315:

  Which spam filter is not available on a FortiGate device?

  A. Sender IP reputation database

  B. URLs included in the body of known SPAM messages.

  C. Email addresses included in the body of known SPAM messages.

  D. Spam object checksums

  E. Spam grey listing

  Correct Answer: E

• Question 316:

  Which statement correctly identified the APIs supported by FortiManager?

  A. JSON and XML

  B. JSON and YAML

  C. YAML and REST

  D. XML and YAML

  Correct Answer: A

• Question 317:

  Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block.

  Which of the following statements regarding overrides is NOT correct?

  A. A web filter profile may only have one user group defined as an override group.

  B. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.

  C. When requesting an override, the matched user must belong to a user group for which the override capabilty has been enabled.

  D. Overrides can be allowed by the administrator for a specific period of time.

  Correct Answer: A

• Question 318:

  A FortiGate 60 unit is configured for your small office. The DMZ interface is connected to a network containing a web server and email server. The Internal interface is connected to a network containing 10 user workstations and the WAN1 interface is connected to your ISP.

  You want to configure firewall policies so that your users can send and receive email messages to the email server on the DMZ network. You also want the email server to be able to retrieve email messages from an email server hosted by your ISP using the POP3 protocol.

  Which policies must be created for this communication? (Select all that apply.)

  A. Internal > DMZ

  B. DMZ > Internal

  C. Internal > WAN1

  D. WAN1 > Internal

  E. DMZ > WAN1

  F. WAN1 > DMZ

  Correct Answer: AE

• Question 319:

  You wish to create a firewall policy that applies only to traffic intended for your web server. The server has an IP address of 192.168.2.2 and belongs to a class C subnet.

  When defining the firewall address for use in this policy, which one of the following addressing formats is correct?

  A. 192.168.2.0 / 255.255.255.0

  B. 192.168.2.2 / 255.255.255.0

  C. 192.168.2.0 / 255.255.255.255

  D. 192.168.2.2 / 255.255.255.255

  Correct Answer: D

• Question 320:

  Which statement correctly names the Administrative Domains modes supported on FortiManager?

  A. Normal and Analyzer

  B. Backup and Analyzer

  C. Normal, Backup. and Collector

  D. Normal and Backup

  Correct Answer: D