NSE5

NSE5 practice questions, page 3 of 13, with answer review and explanations.

Question 11

A FortiGate unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which of the following statements are possible reasons for this? (Select all that apply.)

  1. The external facing interface of the FortiGate unit is configured to use DHCP.
  2. The FortiGate unit has not been registered.
  3. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network and no override push IP is configured.
  4. The FortiGate unit is in Transparent mode which does not support push updates.

Question 12

Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

  1. The proxy will not allow a file to be transmitted in multiple streams simultaneously.
  2. The proxy sends the file to the server while simultaneously buffering it.
  3. If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client.
  4. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.

Question 13

A firewall policy has been configured for the internal email server to receive email from external parties through SMTP. Exhibits A and B show the antivirus and email filter profiles applied to this policy. Exhibit A: Exhibit B: What is the correct behavior when the email attachment is detected as a virus by the FortiGate antivirus engine?

  1. The FortiGate unit will remove the infected file and deliver the email with a replacement message to alert the recipient that the original attachment was infected.
  2. The FortiGate unit will reject the infected email and the sender will receive a failed delivery message.
  3. The FortiGate unit will remove the infected file and add a replacement message. Both sender and recipient are notified that the infected file has been removed.
  4. The FortiGate unit will reject the infected email and notify the sender.

Question 14

Which email filter is NOT available on a FortiGate device?

  1. Sender IP reputation database.
  2. URLs included in the body of known SPAM messages.
  3. Email addresses included in the body of known SPAM messages.
  4. Spam object checksums.
  5. Spam grey listing.

Question 15

Which part of an email message exchange is NOT inspected by the POP3 and IMAP proxies?

  1. TCP connection
  2. File attachments
  3. Message headers
  4. Message body