NSE5 Online Practice Questions and Answers

In which order are firewall policies processed on the FortiGate unit?

A. They are processed from the top down according to their sequence number.

B. They are processed based on the policy ID number shown in the left hand column of the policy window.

C. They are processed on best match.

D. They are processed based on a priority value assigned through the priority column in the policy window.

A FortiGate unit can act as which of the following? (Select all that apply.)

A. Antispam filter

B. Firewall

C. VPN gateway

D. Mail relay

E. Mail server

Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.)

A. Firewall

B. Directory Service

C. Local

D. LDAP

E. PKI

How does the Log View page display logs when ADOMs are enabled?

A. The Log View page displays logs in ADOMs together so they appear as a single device.

B. The Log View page displays logs per ADOM.

C. The Log View page cannot display raw logs when ADOMs are enabled.

D. The Log View page cannot display logs in real-time when ADOMs are enabled.

Which of the following statements describes the method of creating a policy to block access to an FTP site?

A. Enable Web Filter URL blocking and add the URL of the FTP site to the URL Block list.

B. Create a firewall policy with destination address set to the IP address of the FTP site, the Service set to FTP, and the Action set to Deny.

C. Create a firewall policy with a protection profile containing the Block FTP option enabled.

D. None of the above.

Refer to the output below. Which statement is correct concerning the duplicate objects?

Start to import config from device (STUDENT-2) vdom (root) to adom (root), package (STUDENT-2)

"firewall service category", SUCCESS, "(name=General, oid=370, DUPLICATE)"

"firewall schedule recurring", SUCCESS, "(name=always, oid=466, DUPLICATE)"

"firewall address", SUCCESS, "(name=all, oid=358, DUPLICATE)"

"firewall service custom", SUCCESS, "(name=ALL, oid=419, DUPLICATE)"

"firewall vip", SUCCESS, "(name=FTP, oid=468, DUPLICATE)"

A. These duplicate objects exist on the same FortiGate device.

B. FortiManager does not import duplicate objects for entries already in the ADOM configuration database.

C. FortiManager is attempting to install these duplicate objects to the managed FortiGate device.

D. FortiManager creates the duplicate objects in the ADOM configuration database.

Refer to the exhibit. Examine the logs from the FortiView > Log View page:

What is one possible reason this search result yields no results?

A. You cannot use SQL syntax in the Search field of the FortiView > Log View page.

B. Case Sensitive Search is enabled.

C. There are no logs that include https as a service.

D. You cannot search for logs from the FortiView > Log View page.

Which statements are true about Offline mode on the FortiManager? (Choose two.)

A. Enabled by default.

B. Devices cannot be managed when offline mode is enabled.

C. Enabling offline mode enables fgfm protocol (TCP 541).

D. Offline mode is enabled by default when backup is restored on FortiManager.

Which of the following components are contained in all FortiGate units from the FG50 models and up? (Select all that apply.)

A. FortiASIC content processor.

B. Hard Drive.

C. Gigabit network interfaces.

D. Serial console port.

The service access settings for a FortiManager network interface relate to which product feature?

A. Device Manager

B. Policy and Objects

C. FortiGuard

D. FortiView