NSE5

NSE5 practice questions, page 5 of 13, with answer review and explanations.

Question 21

You wish to create a firewall policy that applies only to traffic intended for your web server. The web server has an IP address of 192.168.2.2 and a /24 subnet mask. When defining the firewall address for use in this policy, which one of the following addresses is correct?

  1. 192.168.2.0 / 255.255.255.0
  2. 192.168.2.2 / 255.255.255.0
  3. 192.168.2.0 / 255.255.255.255
  4. 192.168.2.2 / 255.255.255.255

Question 22

What is the effect of using CLI "config system session-ttl" to set session_ttl to 1800 seconds?

  1. Sessions can be idle for no more than 1800 seconds.
  2. The maximum length of time a session can be open is 1800 seconds.
  3. After 1800 seconds, the end user must reauthenticate.
  4. After a session has been open for 1800 seconds, the FortiGate unit will send a keepalive packet to both client and server.

Question 23

Which of the following network protocols are supported for administrative access to a FortiGate unit?

  1. HTTPS, HTTP, SSH, TELNET, PING, SNMP
  2. FTP, HTTPS, NNTP, TCP, WINS
  3. HTTP, NNTP, SMTP, DHCP
  4. Telnet, FTP, RLOGIN, HTTP, HTTPS, DDNS
  5. Telnet, UDP, NNTP, SMTP

Question 24

Which of the following statements is correct regarding a FortiGate unit operating in NAT/Route mode?

  1. The FortiGate unit applies NAT to all traffic.
  2. The FortiGate unit functions as a Layer 3 device.
  3. The FortiGate unit functions as a Layer 2 device.
  4. The FortiGate unit functions as a router and the firewall function is disabled.

Question 25

A FortiGate unit can provide which of the following capabilities? (Select all that apply.)

  1. Email filtering
  2. Firewall
  3. VPN gateway
  4. Mail relay
  5. Mail server