NSE5

NSE5 practice questions, page 9 of 13, with answer review and explanations.

Question 41

Which of the following statements regarding the firewall policy authentication timeout is true?

  1. The authentication timeout is an idle timeout. This means that the FortiGate unit will consider a user to be "idle" if it does not see any packets coming from the users source IP.
  2. The authentication timeout is a hard timeout. This means that the FortiGate unit will remove the temporary policy for this users source IP after this timer has expired.
  3. The authentication timeout is an idle timeout. This means that the FortiGate unit will consider a user to be "idle" if it does not see any packets coming from the users source MAC.
  4. The authentication timeout is a hard timeout. This means that the FortiGate unit will remove the temporary policy for this user’s source MAC after this timer has

Question 42

Two-factor authentication is supported using the following methods? (Select all that apply.)

  1. FortiToken
  2. Email
  3. SMS phone message
  4. Code books

Question 43

Which of the following statements are true regarding Local User Authentication? (Select all that apply.)

  1. Local user authentication is based on usernames and passwords stored locally on the FortiGate unit.
  2. Two-factor authentication can be enabled on a per user basis.
  3. Administrators can create an account for the user locally and specify the remote server to verify the password.
  4. Local users are for administration accounts only and cannot be used for identity policies.

Question 44

Which of the statements below are true regarding firewall policy disclaimers? (Select all that apply.)

  1. User must accept the disclaimer to proceed with the authentication process.
  2. The disclaimer page is customizable.
  3. The disclaimer cannot be used in combination with user authentication.
  4. The disclaimer can only be applied to wireless interfaces.

Question 45

Examine the firewall configuration shown below; then answer the question following it. Which of the following statements are correct based on the firewall configuration illustrated in the exhibit? (Select all that apply.)

  1. A user can access the Internet using only the protocols that are supported by user authentication.
  2. A user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP. These require authentication before the user will be allowed access.
  3. A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access any services.
  4. A user cannot access the Internet using any protocols unless the user has passed firewall authentication.