We provide real NSE5 exam questions and answers braindumps in two formats. Download PDF & Practice Tests. Pass Fortinet NSE5 Exam quickly & easily. The NSE5 PDF type is available for reading and printing. You can print more and practice many times. With the help of our Fortinet NSE5 dumps pdf and vce product and material, you can easily pass the NSE5 exam.


2026 New NSE5 Exam Dumps with PDF and VCE Free: https://www.2passeasy.com/dumps/NSE5/

Q1. - (Topic 1) 

DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.) 

A. SNMP 

B. IPSec 

C. SMTP 

D. POP3 

E. HTTP 

Answer: C,D,E 

Q2. - (Topic 1) 

Which of the following spam filtering methods are supported on the FortiGate unit? (Select all that apply.) 

A. IP Address Check 

B. Open Relay Database List (ORDBL) 

C. Black/White List 

D. Return Email DNS Check 

E. Email Checksum Check 

Answer: A,B,C,D,E 

Q3. - (Topic 2) 

Review the IPsec phase1 configuration in the Exhibit shown below; then answer the question following it. 

Which of the following statements are correct regarding this configuration? (Select all that apply). 

A. The phase1 is for a route-based VPN configuration. 

B. The phase1 is for a policy-based VPN configuration. 

C. The local gateway IP is the address assigned to port1. 

D. The local gateway IP address is 10.200.3.1. 

Answer: A,C 

Q4. - (Topic 1) 

If no firewall policy is specified between two FortiGate interfaces and zones are not used, which of the following statements describes the action taken on traffic flowing between these interfaces? 

A. The traffic is blocked. 

B. The traffic is passed. 

C. The traffic is passed and logged. 

D. The traffic is blocked and logged. 

Answer: A 

Q5. - (Topic 1) 

Which statement is correct regarding virus scanning on a FortiGate unit? 

A. Virus scanning is enabled by default. 

B. Fortinet Customer Support enables virus scanning remotely for you. 

C. Virus scanning must be enabled in a protection profile and the protection profile must be assigned to a firewall policy. 

D. Enabling virus scanning in a protection profile enables virus scanning for all traffic flowing through the FortiGate. 

Answer: C 

Q6. - (Topic 3) 

The transfer of encrypted files or the use of encrypted protocols between users and servers on the internet can frustrate the efforts of administrators attempting to monitor traffic passing through the FortiGate unit and ensuring user compliance to corporate rules. 

Which of the following items will allow the administrator to control the transfer of encrypted data through the FortiGate unit? (Select all that apply.) 

A. Encrypted protocols can be scanned through the use of the SSL proxy. 

B. DLP rules can be used to block the transmission of encrypted files. 

C. Firewall authentication can be enabled in the firewall policy, preventing the use of encrypted communications channels. 

D. Application control can be used to monitor the use of encrypted protocols; alerts can be sent to the administrator through email when the use of encrypted protocols is attempted. 

Answer: A,B,D 

Q7. - (Topic 1) 

A FortiGate 100 unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which of the following statements are possible reasons for this? (Select all that apply.) 

A. The external facing interface of the FortiGate unit is configured to use DHCP. 

B. The FortiGate unit has not been registered. 

C. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network. 

D. The FortiGate unit is in Transparent mode. 

Answer: A,B,C 

Q8. - (Topic 3) 

When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search option. 

What is a valid reason for using the Full Search option, instead? 

A. The search items you are looking for are not contained in indexed log fields. 

B. A quick search only searches data received within the last 24 hours. 

C. You want the search to include the FortiAnalyzer's local logs. 

D. You want the search to include content archive data as well. 

Answer: A 

Q9. - (Topic 1) 

What is the FortiGate unit password recovery process? 

A. Interrupt boot sequence, modify the boot registry and reboot. After changing the password, reset the boot registry. 

B. Log in through the console port using the “maintainer” account within approximately 30 seconds of a reboot. 

C. Hold down the CTRL + Esc (Escape) keys during reboot, then reset the admin password. 

D. The only way to regain access is to interrupt the boot sequence and restore a configuration file for which the password has been modified. 

Answer: B 

Q10. - (Topic 1) 

A firewall policy has been configured such that traffic logging is disabled and a UTM function is enabled. 

In addition, the system setting ‘utm-incident-traffic-log’ has been enabled..In which log will a UTM event message be stored? 

A. Traffic 

B. UTM 

C. System 

D. None 

Answer: A