NSE5

NSE5 practice questions, page 12 of 13, with answer review and explanations.

Question 56

Users may require access to a web site that is blocked by a policy. Administrators can give users the ability to override the block. Which of the following statements regarding overrides is NOT correct?

  1. A web filter profile may only have one user group defined as an override group.
  2. A firewall user group can be used to provide override privileges for FortiGuard Web Filtering.
  3. When requesting an override, the matched user must belong to a user group for which the override capabilty has been enabled.
  4. Overrides can be allowed by the administrator for a specific period of time.

Question 57

An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet. What must the user have for a successful authentication? (Select all that apply.)

  1. An entry in a supported LDAP Directory.
  2. A digital certificate issued by any CA server.
  3. A valid username and password.
  4. A digital certificate issued by the FortiGate unit.
  5. Membership in a firewall user group.

Question 58

The FortiGate unit can be configured to allow authentication to a RADIUS server. The RADIUS server can use several different authentication protocols during the authentication process. Which of the following are valid authentication protocols that can be used when a user authenticates to the RADIUS server? (Select all that apply.)

  1. MS-CHAP-V2 (Microsoft Challenge-Handshake Authentication Protocol v2)
  2. PAP (Password Authentication Protocol)
  3. CHAP (Challenge-Handshake Authentication Protocol)
  4. MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol v1)
  5. FAP (FortiGate Authentication Protocol)

Question 59

Which of the following are valid components of the Fortinet Server Authentication Extensions (FSAE)? (Select all that apply.)

  1. Domain Local Security Agent.
  2. Collector Agent.
  3. Active Directory Agent.
  4. User Authentication Agent.
  5. Domain Controller Agent.

Question 60

A FortiGate unit can create a secure connection to a client using SSL VPN in tunnel mode. Which of the following statements are correct regarding the use of tunnel mode SSL VPN? (Select all that apply.)

  1. Split tunneling can be enabled when using tunnel mode SSL VPN.
  2. Software must be downloaded to the web client to be able to use a tunnel mode SSL VPN.
  3. Users attempting to create a tunnel mode SSL VPN connection must be members of a configured user group on the FortiGate unit.
  4. Tunnel mode SSL VPN requires the FortiClient software to be installed on the user's computer.
  5. The source IP address used by the client for the tunnel mode SSL VPN is assigned by the FortiGate unit.