Replace Fortinet NSE5 exam dumps

Q1. - (Topic 1) 

FortiGate units are preconfigured with four default protection profiles. These protection profiles are used to control the type of content inspection to be performed. 

What action must be taken for one of these profiles to become active? 

A. The protection profile must be assigned to a firewall policy. 

B. The "Use Protection Profile" option must be selected in the Web Config tool under the sections for AntiVirus, IPS, WebFilter, and AntiSpam. 

C. The protection profile must be set as the Active Protection Profile. 

D. All of the above. 

View Answer

Q2. - (Topic 3) 

The following diagnostic output is displayed in the CLI: 

diag firewall auth list 

policy iD. 9, srC. 192.168.3.168, action: accept, timeout: 13427 

user: forticlient_chk_only, group: 

flag (80020): auth timeout_ext, flag2 (40): exact 

group iD. 0, av group: 0 

----- 1 listed, 0 filtered ------

Based on this output, which of the following statements is correct? 

A. Firewall policy 9 has endpoint compliance enabled but not firewall authentication. 

B. The client check that is part of an SSL VPN connection attempt failed. 

C. This user has been associated with a guest profile as evidenced by the group id of 0. 

D. An auth-keepalive value has been enabled. 

View Answer

Q3. - (Topic 2) 

Which of the following represents the correct order of criteria used for the selection of a Master unit within a FortiGate High Availability (HA) cluster when master override is disabled? 

A. 1. port monitor, 2. unit priority, 3. up time, 4. serial number 

B. 1. port monitor, 2. up time, 3. unit priority, 4. serial number 

C. 1. unit priority, 2. up time, 3. port monitor, 4. serial number 

D. 1. up time, 2. unit priority, 3. port monitor, 4. serial number 

View Answer

Q4. - (Topic 1) 

Which of the following components are contained in all FortiGate units from the FG50 models and up? (Select all that apply.) 

A. FortiASIC content processor. 

B. Hard Drive. 

C. Gigabit network interfaces. 

D. Serial console port. 

View Answer

Q5. - (Topic 1) 

Which of the following statements are true regarding Local User Authentication? (Select all that apply.) 

A. Local user authentication is based on usernames and passwords stored locally on the FortiGate unit. 

B. Two-factor authentication can be enabled on a per user basis. 

C. Administrators can create an account for the user locally and specify the remote server to verify the password. 

D. Local users are for administration accounts only and cannot be used for identity policies. 

View Answer

Q6. - (Topic 2) 

Examine the Exhibit shown below; then answer the question following it. 

In this scenario, the Fortigate unit in Ottawa has the following routing table: 

S* 0.0.0.0/0 [10/0] via 172.20.170.254, port2 

C 172.20.167.0/24 is directly connected, port1 

C 172.20.170.0/24 is directly connected, port2 

Sniffer tests show that packets sent from the Source IP address 172.20.168.2 to the Destination IP address 172.20.169.2 are being dropped by the FortiGate unit located in Ottawa. Which of the following correctly describes the cause for the dropped packets? 

A. The forward policy check. 

B. The reverse path forwarding check. 

C. The subnet 172.20.169.0/24 is NOT in the Ottawa FortiGate unit’s routing table. 

D. The destination workstation 172.20.169.2 does NOT have the subnet 172.20.168.0/24 in its routing table. 

View Answer

Q7. - (Topic 1) 

Which statement is correct regarding virus scanning on a FortiGate unit? 

A. Virus scanning is enabled by default. 

B. Fortinet Customer Support enables virus scanning remotely for you. 

C. Virus scanning must be enabled in a UTM security profile and the UTM security profile must be assigned to a firewall policy. 

D. Enabling virus scanning in a UTM security profile enables virus scanning for all traffic flowing through the FortiGate device. 

View Answer

Q8. - (Topic 1) 

When backing up the configuration file on a FortiGate unit, the contents can be encrypted 

by enabling the encrypt option and supplying a password. 

If the password is forgotten, the configuration file can still be restored using which of the following methods? 

A. Selecting the recover password option during the restore process. 

B. Having the password emailed to the administrative user by selecting the Forgot Password option. 

C. Sending the configuration file to Fortinet Support for decryption. 

D. If the password is forgotten, there is no way to use the file. 

View Answer

Q9. - (Topic 1) 

An administrator wants to assign a set of UTM features to a group of users. Which of the following is the correct method for doing this? 

A. Enable a set of unique UTM profiles under "Edit User Group". 

B. The administrator must enable the UTM profiles in an identity-based policy applicable to the user group. 

C. When defining the UTM objects, the administrator must list the user groups which will use the UTM object. 

D. The administrator must apply the UTM features directly to a user object. 

View Answer

Q10. - (Topic 3) 

When configuring a server load balanced virtual IP, which of the following is the best distribution algorithm to be used in applications where the same physical destination server must be maintained between sessions? 

A. Static 

B. Round robin 

C. Weighted round robin 

D. Least connected 

View Answer