★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions

Free Instant Download NEW NSE5 Exam Dumps (PDF & VCE):
Available on: https://www.certleader.com/NSE5-dumps.html


Dished up to see the information you have important Actualtests NSE5 Pdf download. (Quickly even be recorded around NSE5 test out website form.) Certainly youll do well and also Growth NSE5 ( Fortinet Network Security Expert 5 Written Exam (500) ) investigate substance - to conquer various other expensive methods, not necessarily facts, such as Fortinet Network Security Expert 5 Written Exam (500) window blind audio tracks test out Fortinet Network Security Expert 5 Written Exam (500) information. It is recommended to consider a single semester with educational setting. Credentialed recently and also download Fortinet Network Security Expert 5 Written Exam (500) examination answers and also Actualtests NSE5 on your computer system these days!

2021 Dec NSE5 latest exam

Q31. - (Topic 3) 

Which of the following items are considered to be advantages of using the application control features on the FortiGate unit? 

Application control allows an administor to: 

A. set a unique session-ttl for select applications. 

B. customize application types in a similar way to adding custom IPS signatures. 

C. check which applications are installed on workstations attempting to access the network. 

D. enable AV scanning per application rather than per policy. 

Answer: A 


Q32. - (Topic 3) 

An administrator is examining the attack logs and notices the following entry: 

type=ips subtype=signature pri=alert vd=root serial=1995 attack_id=103022611 src=69.45.64.22 dst=192.168.1.100 src_port=80 dst_port=4887 src_int=wlan dst_int=internal status=detected proto=6 service=4887/tcp user=N/A group=N/A msg=web_client: IE.IFRAME.BufferOverflow.B 

Based on the information displayed in this entry, which of the following statements are correct? (Select all that apply.) 

A. This is an HTTP server attack. 

B. The attack was detected and blocked by the FortiGate unit. 

C. The attack was against a FortiGate unit at the 192.168.1.100 IP address. 

D. The attack was detected and passed by the FortiGate unit. 

Answer: C,D 


Q33. - (Topic 3) 

An administrator wishes to generate a report showing Top Traffic by service type. They notice that web traffic overwhelms the pie chart and want to exclude the web traffic from the report. 

Which of the following statements best describes how to do this? 

A. In the Service field of the Data Filter, type 80/tcp and select the NOT checkbox. 

B. Add the following entry to the Generic Field section of the Data Filter: service="!web". 

C. When editing the chart, uncheck wlog to indicate that Web Filtering data is being excluded when generating the chart. 

D. When editing the chart, enter 'http' in the Exclude Service field. 

Answer: A 


Q34. - (Topic 1) 

Which of the following methods can be used to access the CLI? (Select all that apply.) A. By using a direct connection to a serial console. 

B. By using the CLI console window in Web Config. 

C. By using an SSH connection. 

D. By using a Telnet connection. 

Answer: A,B,C,D 


Q35. - (Topic 1) 

Which of the following products provides dedicated hardware to analyze log data from multiple FortiGate devices? 

A. FortiGate device 

B. FortiAnalyzer device 

C. FortiClient device 

D. FortiManager device 

E. FortiMail device 

F. FortiBridge device 

Answer: B 


Abreast of the times NSE5 exams:

Q36. - (Topic 2) 

In Transparent Mode, forward-domain is an attribute of ______________. 

A. an interface 

B. a firewall policy 

C. a static route 

D. a virtual domain 

Answer: A 


Q37. - (Topic 1) 

Which of the following are valid FortiGate device interface methods for handling DNS requests? (Select all that apply.) 

A. Forward-only 

B. Non-recursive 

C. Recursive 

D. Iterative 

E. Conditional-forward 

Answer: A,B,C 


Q38. - (Topic 2) 

Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the Exhibit below. 

Which of the following statements are correct regarding this output? (Select all that apply.) 

A. The connecting client has been allocated address 172.20.1.1. 

B. In the Phase 1 settings, dead peer detection is enabled. 

C. The tunnel is idle. 

D. The connecting client has been allocated address 10.200.3.1. 

Answer: A,B 


Q39. - (Topic 1) 

SSL content inspection is enabled on the FortiGate unit. Which of the following steps is required to prevent a user from being presented with a web browser warning when accessing an SSL-encrypted website? 

A. The root certificate of the FortiGate SSL proxy must be imported into the local certificate store on the user's workstation. 

B. Disable the strict server certificate check in the web browser under Internet Options. 

C. Enable transparent proxy mode on the FortiGate unit. 

D. Enable NTLM authentication on the FortiGate unit. NTLM authentication suppresses the certificate warning messages in the web browser. 

Answer: A 


Q40. - (Topic 1) 

Which of the following statements is correct regarding URL Filtering on the FortiGate unit? 

A. The available actions for URL Filtering are Allow and Block. 

B. Multiple URL Filter lists can be added to a single Web filter profile. 

C. A FortiGuard Web Filtering Override match will override a block action in the URL filter list. 

D. The available actions for URL Filtering are Allow, Block and Exempt. 

Answer: D