Ucertify offers free demo for NSE5 exam. "Fortinet Network Security Expert 5 Written Exam (500)", also known as NSE5 exam, is a Fortinet Certification. This set of posts, Passing the Fortinet NSE5 exam, will help you answer those questions. The NSE5 Questions & Answers covers all the knowledge points of the real exam. 100% real Fortinet NSE5 exams and revised by experts!

Q73. - (Topic 2) 

Review the output of the command config router ospf shown in the Exhibit below; then answer the question following it. 

Which one of the following statements is correct regarding this output? 

A. OSPF Hello packets will only be sent on interfaces configured with the IP addresses 

172.16.1.1 and 172.16.1.2. 

B. OSPF Hello packets will be sent on all interfaces of the FortiGate device. 

C. OSPF Hello packets will be sent on all interfaces configured with an address matching the 10.0.1.0/24 and 172.16.0.0/12 networks. 

D. OSPF Hello packets are not sent on point-to-point networks. 

Answer: C 


Q74. - (Topic 1) 

Which of the following statements are true of the FortiGate unit’s factory default configuration? 

A. ‘Port1’ or ‘Internal’ interface will have an IP of 192.168.1.99. 

B. ‘Port1’ or ‘Internal’ interface will have a DHCP server set up and enabled (on devices that support DHCP Servers). 

C. Default login will always be the username: admin (all lowercase) and no password. 

D. The implicit firewall action is ACCEPT. 

Answer: A,B,C 


Q75. - (Topic 1) 

Examine the firewall configuration shown below; then answer the question following it. 

Which of the following statements are correct based on the firewall configuration illustrated in the exhibit? (Select all that apply.) 

A. A user can access the Internet using only the protocols that are supported by user authentication. 

B. A user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP. These require authentication before the user will be allowed access. 

C. A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access any services. 

D. A user cannot access the Internet using any protocols unless the user has passed firewall authentication. 

Answer: A,D 


Q76. - (Topic 1) 

Caching improves performance by reducing FortiGate unit requests to the FortiGuard server. 

Which of the following statements are correct regarding the caching of FortiGuard responses? (Select all that apply.) 

A. Caching is available for web filtering, antispam, and IPS requests. 

B. The cache uses a small portion of the FortiGate system memory. 

C. When the cache is full, the least recently used IP address or URL is deleted from the cache. 

D. An administrator can configure the number of seconds to store information in the cache before the FortiGate unit contacts the FortiGuard server again. 

E. The size of the cache will increase to accomodate any number of cached queries. 

Answer: B,C,D 


Q77. - (Topic 1) 

Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.) 

A. Firewall 

B. Directory Service 

C. Local 

D. LDAP 

E. PKI 

Answer: A,B 


Q78. CORRECT TEXT - (Topic 1) 

When creating administrative users, the assigned _____________determines user rights on the FortiGate unit. 

Answer: access profile 


Q79. - (Topic 2) 

Identify the correct properties of a partial mesh VPN deployment: 

A. VPN tunnels interconnect between every single location. 

B. VPN tunnels are not configured between every single location. 

C. Some locations are reached via a hub location. 

D. There are no hub locations in a partial mesh. 

Answer: B,C 


Q80. - (Topic 3) 

Which of the following represents the method used on a FortiGate unit running FortiOS version 4.2 to apply traffic shaping to P2P traffic, such as BitTorrent? 

A. Apply a Traffic Shaper to a BitTorrent entry in an Application Control List. 

B. Enable the Shape option in a Firewall policy with a Service set to BitTorrent. 

C. Define a DLP Rule to match against BitTorrent traffic and include the rule in a DLP Sensor with Traffic Shaping enabled. 

D. Specify the amount of Rate Limiting to be applied to BitTorrent traffic through the P2P settings of the Firewall Policy Protocol Options. 

Answer: A