we provide Free Fortinet NSE5 vce which are the best for clearing NSE5 test, and to get certified by Fortinet Fortinet Network Security Expert 5 Written Exam (500). The NSE5 Questions & Answers covers all the knowledge points of the real NSE5 exam. Crack your Fortinet NSE5 Exam with latest dumps, guaranteed!

Q9. - (Topic 3) 

When viewing the Banned User monitor in Web Config, the administrator notes the entry illustrated in the exhibit. 

Which of the following statements is correct regarding this entry? 

A. The entry displays a ban that has been added as a result of traffic triggering a configured DLP rule. 

B. The entry displays a ban that was triggered by HTTP traffic matching an IPS signature. 

This client is banned from receiving or sending any traffic through the FortiGate. 

C. The entry displays a quarantine, which could have been added by either IPS or DLP. 

D. This entry displays a ban entry that was added manually by the administrator on June11th. 

Answer: A 


Q10. - (Topic 1) 

Which statement is correct regarding virus scanning on a FortiGate unit? 

A. Virus scanning is enabled by default. 

B. Fortinet Customer Support enables virus scanning remotely for you. 

C. Virus scanning must be enabled in a UTM security profile and the UTM security profile must be assigned to a firewall policy. 

D. Enabling virus scanning in a UTM security profile enables virus scanning for all traffic flowing through the FortiGate device. 

Answer: C 


Q11. - (Topic 1) 

When firewall policy authentication is enabled, only traffic on supported protocols will trigger an authentication challenge. 

Select all supported protocols from the following: 

A. SMTP 

B. SSH 

C. HTTP 

D. FTP 

E. SCP 

Answer: C,D 


Q12. - (Topic 1) 

You wish to create a firewall policy that applies only to traffic intended for your web server. The server has an IP address of 192.168.2.2 and belongs to a class C subnet. When defining the firewall address for use in this policy, which one of the following addressing formats is correct? 

A. 192.168.2.0 / 255.255.255.0 

B. 192.168.2.2 / 255.255.255.0 

C. 192.168.2.0 / 255.255.255.255 

D. 192.168.2.2 / 255.255.255.255 

Answer: D 


Q13. - (Topic 3) 

Which of the following statements is correct regarding the antivirus scanning function on the FortiGate unit? 

A. Antivirus scanning provides end-to-end virus protection for client workstations. 

B. Antivirus scanning provides virus protection for the HTTP, Telnet, SMTP, and FTP protocols. 

C. Antivirus scanning supports banned word checking. 

D. Antivirus scanning supports grayware protection. 

Answer: D 


Q14. - (Topic 1) 

A client can establish a secure connection to a corporate network using SSL VPN in tunnel mode. 

Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.) 

A. Split tunneling can be enabled when using tunnel mode SSL VPN. 

B. Client software is required to be able to use a tunnel mode SSL VPN. 

C. Users attempting to create a tunnel mode SSL VPN connection must be authenticated by at least one SSL VPN policy. 

D. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit. 

Answer: A,B,C,D 


Q15. - (Topic 1) 

The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate Web Config and also using the CLI. The command used in the CLI to perform this function is __________. 

A. set order 

B. edit policy 

C. reorder 

D. move 

Answer: D 


Q16. - (Topic 2) 

Which of the following represents the correct order of criteria used for the selection of a Master unit within a FortiGate High Availability (HA) cluster when master override is disabled? 

A. 1. port monitor, 2. unit priority, 3. up time, 4. serial number 

B. 1. port monitor, 2. up time, 3. unit priority, 4. serial number 

C. 1. unit priority, 2. up time, 3. port monitor, 4. serial number 

D. 1. up time, 2. unit priority, 3. port monitor, 4. serial number 

Answer: B