NSE5

NSE5 practice questions, page 11 of 13, with answer review and explanations.

Question 51

Which one of the following statements is correct about raw log messages?

  1. Logs have a header and a body section. The header will have the same layout for every log message. The body section will change layout from one type of log message to another.
  2. Logs have a header and a body section. The header and body will change layout from one type of log message to another.
  3. Logs have a header and a body section. The header and body will have the same layout for every log message.

Question 52

Which of the following is an advantage of using SNMP v3 instead of SNMP v1/v2 when querying the FortiGate unit?

  1. Packet encryption
  2. MIB-based report uploads
  3. SNMP access limits through access lists
  4. Running SNMP service on a non-standard port is possible

Question 53

Which of the following authentication types are supported by FortiGate units? (Select all that apply.)

  1. Kerberos
  2. LDAP
  3. RADIUS
  4. Local Users

Question 54

Which of the following are valid authentication user group types on a FortiGate unit? (Select all that apply.)

  1. Firewall
  2. Directory Service
  3. Local
  4. LDAP
  5. PKI

Question 55

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides are correct? (Select all that apply.)

  1. A protection profile may have only one user group defined as an override group.
  2. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
  3. Authentication to allow the override is based on a user's membership in a user group.
  4. Overrides can be allowed by the administrator for a specific period of time.