Fortinet Fortinet Certifications NSE5 Questions & Answers

• Question 81:

  The FortiGate unit's GUI provides a link to update the firmware. Clicking this link will perform which of the following actions?

  A. It will connect to the Fortinet Support site where the appropriate firmware version can be selected.

  B. It will send a request to the FortiGuard Distribution Network so that the appropriate firmware version can be pushed down to the FortiGate unit.

  C. It will present a prompt to allow browsing to the location of the firmware file.

  D. It will automatically connect to the Fortinet Support site to download the most recent firmware version for the FortiGate unit.

  Correct Answer: C

• Question 82:

  Shown below is a section of output from the debug command diag ip arp list.

  index=2 ifname=port1 172.20.187.150 00:09:0f:69:03:7e state=00000004 use=4589 confirm=4589 update=2422 ref=1 In the output provided, which of the following best describes the IP address 172.20.187.150?

  A. It is the primary IP address of the port1 interface.

  B. It is one of the secondary IP addresses of the port1 interface.

  C. It is the IP address of another network device located in the same LAN segment as the FortiGate unit's port1 interface.

  Correct Answer: C

• Question 83:

  A client can establish a secure connection to a corporate network using SSL VPN in tunnel mode.

  Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.)

  A. Split tunneling can be enabled when using tunnel mode SSL VPN.

  B. Client software is required to be able to use a tunnel mode SSL VPN.

  C. Users attempting to create a tunnel mode SSL VPN connection must be authenticated by at least one SSL VPN policy.

  D. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.

  Correct Answer: ABCD

• Question 84:

  Refer to the exhibit. Examine the logs from the FortiView > Log View page:

  

  What is one possible reason this search result yields no results?

  

  A. You cannot use SQL syntax in the Search field of the FortiView > Log View page.

  B. Case Sensitive Search is enabled.

  C. There are no logs that include https as a service.

  D. You cannot search for logs from the FortiView > Log View page.

  Correct Answer: B

• Question 85:

  Refer to the exhibit. What does the clock icon denote beside the Bandwidth and Applications Report?

  

  A. It is a custom report.

  B. It is an imported report from either a different FortiAnalyzer device or a different (but supported) ADOM.

  C. It is in the process of generating.

  D. It is a scheduled report.

  Correct Answer: D

• Question 86:

  DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)

  A. SNMP

  B. IPSec

  C. SMTP

  D. POP3

  E. HTTP

  Correct Answer: CDE

• Question 87:

  What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply.)

  A. Using a hub and spoke topology is required to achieve full redundancy.

  B. Using a hub and spoke topology simplifies configuration because fewer tunnels are required.

  C. Using a hub and spoke topology provides stronger encryption.

  D. The routing at a spoke is simpler, compared to a meshed node.

  Correct Answer: BD

• Question 88:

  What are the three different methods you can employ to send event notifications when an event occurs that matches a configured event handler? (Choose three.)

  A. Email

  B. SMS

  C. SNMP

  D. IM

  E. Syslog

  Correct Answer: ACE

• Question 89:

  Encrypted backup files provide which of the following benefits? (Select all that apply.)

  A. Integrity of the backup file is protected since it cannot be easily modified when encrypted.

  B. Prevents the backup file from becoming corrupted.

  C. Protects details of the device's configuration settings from being discovered while the backup file is in transit. For example, transferred to a data centers for system recovery.

  D. A copy of the encrypted backup file is automatically pushed to the FortiGuard Distribution Service (FDS) for disaster recovery purposes. If the backup file becomes corrupt it can be retrieved through FDS.

  E. Fortinet Technical Support can recover forgotten passwords with a backdoor passphrase.

  Correct Answer: AC

• Question 90:

  When browsing to an internal web server using a web-mode SSL VPN bookmark, from which of the following source IP addresses would the web server consider the HTTP request to be initiated?

  A. The remote user's virtual IP address.

  B. The FortiGate unit's internal IP address.

  C. The remote user's public IP address.

  D. The FortiGate unit's external IP address.

  Correct Answer: B