NSE5

NSE5 practice questions, page 10 of 13, with answer review and explanations.

Question 46

When browsing to an internal web server using a web-mode SSL VPN bookmark, from which of the following source IP addresses would the web server consider the HTTP request to be initiated?

  1. The remote user's virtual IP address.
  2. The FortiGate unit's internal IP address.
  3. The remote user's public IP address.
  4. The FortiGate unit's external IP address.

Question 47

An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The tunnel will start up for a few seconds, then shut down. Which of the following statements best describes how to resolve this issue?

  1. This user does not have permission to enable tunnel mode. Make sure that the tunnel mode widget has been added to that user's web portal.
  2. This FortiGate unit may have multiple Internet connections. To avoid this problem, use the appropriate CLI command to bind the SSL VPN connection to the original incoming interface.
  3. Check the SSL adaptor on the host machine. If necessary, uninstall and reinstall the adaptor from the tunnel mode portal.
  4. Make sure that only Internet Explorer is used. All other browsers are unsupported.

Question 48

You are the administrator in charge of a FortiGate unit which acts as a VPN gateway. You have chosen to use Interface Mode when configuring the VPN tunnel and you want users from either side to be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate unit already has a default route. Which of the following configuration steps are required to achieve these objectives? (Select all that apply.)

  1. Create one firewall policy.
  2. Create two firewall policies.
  3. Add a route for the remote subnet.
  4. Add a route for incoming traffic.
  5. Create a phase 1 definition.
  6. Create a phase 2 definition.

Question 49

Which of the following items is NOT a packet characteristic matched by a firewall service object?

  1. ICMP type and code
  2. TCP/UDP source and destination ports
  3. IP protocol number
  4. TCP sequence number

Question 50

A firewall policy has been configured such that traffic logging is disabled and a UTM function is enabled. In addition, the system setting utm-incident-traffic-log has been enabled. In which log will a UTM event message be stored?

  1. Traffic
  2. UTM
  3. System
  4. None