NSE5 Online Practice Questions and Answers

Which of the following network protocols are supported for administrative access to a FortiGate unit?

A. HTTPS, HTTP, SSH, TELNET, PING, SNMP

B. FTP, HTTPS, NNTP, TCP, WINS

C. HTTP, NNTP, SMTP, DHCP

D. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS

E. Telnet, UDP, NNTP, SMTP

If Routing Information Protocol (RIP) version 1 or version 2 has already been configured on a FortiGate unit, which of the following statements is correct if the routes learned through RIP need to be advertised into Open Shortest Path First (OSPF)?

A. The FortiGate unit will automatically announce all routes learned through RIP v1 or v2 to its OSPF neighbors.

B. The FortiGate unit will automatically announce all routes learned only through RIP v2 to its OSPF neighbors.

C. At a minimum, the network administrator needs to enable Redistribute RIP in the OSPF Advanced Options.

D. The network administrator needs to configure a RIP to OSPF announce policy as part of the RIP settings.

E. At a minimum, the network administrator needs to enable Redistribute Default in the OSPF Advanced Options.

A FortiGate unit can act as which of the following? (Select all that apply.)

A. Antispam filter

B. Firewall

C. VPN gateway

D. Mail relay

E. Mail server

What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply.)

A. Using a hub and spoke topology is required to achieve full redundancy.

B. Using a hub and spoke topology simplifies configuration.

C. Using a hub and spoke topology provides stronger encryption.

D. Using a hub and spoke topology reduces the number of tunnels.

Administrators can send alerts to multiple recipients through which methods? (Choose three.)

A. Email

B. SMS

C. SNMP

D. Syslog

E. Instant Message (IM)

Two devices are in an HA cluster, the device hostnames are STUDENT and REMOTE. Exhibit A shows the command output of 'diag sys session stat' for the STUDENT device. Exhibit B shows the command output of 'diag sys session stat' for the REMOTE device.

Exhibit A:

Exhibit B: Given the information provided in the exhibits, which of the following statements are correct? (Select all that apply.)

A. STUDENT is likely to be the master device.

B. Session-pickup is likely to be enabled.

C. The cluster mode is definitely Active-Passive.

D. There is not enough information to determine the cluster mode.

An administrator is examining the attack logs and notices the following entry:

type=ips subtype=signature pri=alert vd=root serial=1995 attack_id=103022611 src=69.45.64.22 dst=192.168.1.100 src_port=80 dst_port=4887 src_int=wlan dst_int=internal status=detected proto=6 service=4887/tcp user=N/A group=N/A msg=web_client: IE.IFRAME.BufferOverflow.B

Based on the information displayed in this entry, which of the following statements are correct? (Select all that apply.)

A. This is an HTTP server attack.

B. The attack was detected and blocked by the FortiGate unit.

C. The attack was against a FortiGate unit at the 192.168.1.100 IP address.

D. The attack was detected and passed by the FortiGate unit.

Which of the following statements regarding Banned Words are correct? (Select all that apply.)

A. The FortiGate unit can scan web pages and email messages for instances of banned words.

B. When creating a banned word list, an administrator can indicate either specific words or patterns.

C. Banned words can be expressed as wildcards or regular expressions.

D. Content is automatically blocked if a single instance of a banned word appears.

E. The FortiGate unit includes a pre-defined library of common banned words.

Which of the following statements is correct regarding URL Filtering on the FortiGate unit?

A. The available actions for URL Filtering are Allow and Block.

B. Multiple URL Filter lists can be added to a single Web filter profile.

C. A FortiGuard Web Filtering Override match will override a block action in the URL filter list.

D. The available actions for URL Filtering are Allow, Block and Exempt.

Which statement is true regarding the import/export feature?

A. This is only a feature for reports.

B. This feature is for reports and charts.

C. This feature is for reports, charts, and datasets.

D. This feature is for reports and datasets.