Online Access Free NSE5 Exam Questions

Which statement is correct regarding virus scanning on a FortiGate unit?

• A.Enabling virus scanning in a protection profile enables virus scanning for all traffic flowing through the FortiGate.
• B.Virus scanning is enabled by default.
• C.Fortinet Customer Support enables virus scanning remotely for you.
• D.Virus scanning must be enabled in a protection profile and the protection profile must be assigned to a firewall policy.

A network administrator needs to implement dynamic route redundancy between a FortiGate unit located in a remote office and a FortiGate unit located in the central office.
The remote office accesses central resources using IPSec VPN tunnels through two different Internet providers.
What is the best method for allowing the remote office access to the resources through the FortiGate unit used at the central office?

• A.Use two or more policy-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.
• B.Use route-based VPNs on the central office FortiGate unit to advertise routes with a dynamic routing protocol and use a policy-based VPN on the remote office with two or more static default routes.
• C.Dynamic routing protocols cannot be used over IPSec VPN tunnels.
• D.Use two or more route-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.

In HA, the option Reserve Management Port for Cluster Member is selected as shown in the Exhibit below.

Which of the following statements are correct regarding this setting? (Select all that apply.)

• A.A gateway address may be configured for port7.
• B.The IP address assigned to this interface must not overlap with the IP address subnet assigned to another interface.
• C.Port7 appears in the routing table.
• D.Interface settings on port7 will not be synchronized with other cluster members.
• E.When connecting to port7 you always connect to the master device.

Which two statements are correct concerning the revision history functionality? (Choose two.)

• A.The retrieve button downloads the managed device's revision history.
• B.The diff feature can be used to compare two revisions.
• C.The auto update feature automatically installs changes made from FortiManager.
• D.When a modified configuration is installed, FortiManager creates a new revision.

Which of the following Session TTL values will take precedence?

• A.Session TTL specified at the system level for that port number
• B.Session TTL dictated by the application control list associated with the matching firewall policy
• C.Session TTL specified in the matching firewall policy
• D.The default session TTL specified at the system level