NSE5 Online Practice Questions and Answers

Which two statements describe a "modified" device settings' status in the Configuration and Installation Status widget of a managed FortiGate device? (Choose two.)

A. Configuration changes were made directly on the managed device.

B. Configuration changes were made from Device Manager for a managed FortiGate device.

C. Configuration changes were installed to a managed FortiGate device.

D. Configuration changes in Device Manager no longer match the latest revision in the device's revision history.

Examine the exhibit shown below; then answer the question following it.

Which of the following statements best describes the green status indicators that appear next to the different FortiGuard Distribution Network services as illustrated in the exhibit?

A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Network.

B. They indicate that the FortiGate unit has the latest updates that are available from the FortiGuard Distribution Network.

C. They indicate that updates are available and should be downloaded from the FortiGuard Distribution Network to the FortiGate unit.

D. They indicate that the FortiGate unit is in the process of downloading updates from the FortiGuard Distribution Network.

Review the output of the command get router info routing-table all shown in the Exhibit below; then answer the question following it.

Which one of the following statements correctly describes this output?

A. The two routes to the 10.0.2.0/24 subnet are ECMP routes and traffic will be load balanced based on the configured ECMP settings.

B. The route to the 10.0.2.0/24 subnet via interface Remote_1 is the active and the route via Remote_2 is the backup.

C. OSPF does not support ECMP therefore only the first route to subnet 10.0.1.0/24 is used.

D. 172.16.2.1 is the preferred gateway for subnet 10.0.2.0/24.

Alert emails enable the FortiGate unit to send email notifications to an email address upon detection of a pre-defined event type.

Which of the following are some of the available event types in Web Config? (Select all that apply.)

A. Intrusion detected.

B. Successful firewall authentication.

C. Oversized file detected.

D. DHCP address assigned.

E. FortiGuard Web Filtering rating error detected.

Which of the following statements is correct about how the FortiGate unit verifies username and password during user authentication?

A. If a remote server is included in a user group, it will be checked before local accounts.

B. An administrator can define a local account for which the password must be verified by querying a remote server.

C. If authentication fails with a local password, the FortiGate unit will query the authentication server if the local user is configured with both a local password and an authentication server.

D. The FortiGate unit will only attempt to authenticate against Active Directory if Fortinet Server Authentication Extensions are installed and configured.

The default administrator profile that is assigned to the default "admin" user on a FortGate device is: __________ .

A. trusted-admin

B. super_admin

C. super_user

D. admin

E. fortinet-root

Which of the following features could be used by an administrator to block FTP uploads while still allowing FTP downloads?

A. Anti-Virus File-Type Blocking

B. Data Leak Prevention

C. Network Admission Control

D. FortiClient Check

The eicar test virus is put into a zip archive, which is given the password of "Fortinet" in order to open the archive. Review the configuration in the exhibits shown below; then answer the question that follows.

Exhibit A Antivirus Profile:

Exhibit B

Non-default UTM Proxy Options Profile:

Exhibit C DLP Profile:

Which of one the following profiles could be enabled in order to prevent the file from passing through the FortiGate device over HTTP on the standard port for that protocol?

A. Only Exhibit A

B. Only Exhibit B

C. Only Exhibit C with default UTM Proxy settings.

D. All of the Exhibits (A, B and C)

E. Only Exhibit C with non-default UTM Proxy settings (Exhibit B).

Which of the following are valid components of the Fortinet Server Authentication Extensions (FSAE)? (Select all that apply.)

A. Domain Local Security Agent.

B. Collector Agent.

C. Active Directory Agent.

D. User Authentication Agent.

E. Domain Controller Agent.

Which of the following statements best describes the green status indicators that appear next to different FortiGuard Distribution Network services as illustrated in the exhibit?

A. They indicate that the FortiGate unit is able to connect to the FortiGuard Distribution Network.

B. They indicate that the FortiGate unit has the latest updates that are available from the FortiGuard Distribution Network.

C. They indicate that updates are available and should be downloaded from the FortiGuard Distribution Network to the FortiGate unit.

D. They indicate that the FortiGate unit is in the process of downloading updates from the FortiGuard Distribution Network.