NSE5

NSE5 practice questions, page 4 of 13, with answer review and explanations.

Question 16

What are the valid sub-types for a Firewall type policy? (Select all that apply)

  1. Device Identity
  2. Address
  3. User Identity
  4. Schedule
  5. SSL VPN

Question 17

In NAT/Route mode when there is no matching firewall policy for traffic to be forwarded by the Firewall, which of the following statements describes the action taken on traffic?

  1. The traffic is blocked.
  2. The traffic is passed.
  3. The traffic is passed and logged.
  4. The traffic is blocked and logged.

Question 18

In which order are firewall policies processed on the FortiGate unit?

  1. They are processed from the top down according to their sequence number.
  2. They are processed based on the policy ID number shown in the left hand column of the policy window.
  3. They are processed on best match.
  4. They are processed based on a priority value assigned through the priority column in the policy window.

Question 19

Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)

  1. An IP address pool.
  2. A virtual IP address.
  3. An actual IP address or an IP address group.
  4. An FQDN or Geographic value(s).

Question 20

The ordering of firewall policies is very important. Policies can be re-ordered within the FortiGate units GUI and also using the CLI. The command used in the CLI to perform this function is ______ .

  1. set order
  2. edit policy
  3. reorder
  4. move