Fortinet Network Security Expert 5 Written (500) Set 1

1.

Which statement is correct regarding virus scanning on a FortiGate unit?

Virus scanning is enabled by default. Fortinet Customer Support enables virus scanning remotely for you. Virus scanning must be enabled in a UTM security profile and the UTM security profile must be assigned to a firewall policy. Enabling virus scanning in a UTM security profile enables virus scanning for all traffic flowing through the FortiGate device.

2.

Which of the following statements are correct regarding URL filtering on the FortiGate unit? (Select all that apply.)

The allowed actions for URL Filtering include Allow, Block and Exempt. The allowed actions for URL Filtering are Allow and Block. The FortiGate unit can filter URLs based on patterns using text and regular expressions. Any URL accessible by a web browser can be blocked using URL Filtering. Multiple URL Filter lists can be added to a single protection profile.

3.

Which of the following regular expression patterns will make the terms confidential data case insensitive?

\[confidential data] /confidential data/i i/confidential data/ confidential data /confidential data/c

4.

Which of the following email spam filtering features is NOT supported on a FortiGate unit?

Multipurpose Internet Mail Extensions (MIME) Header Check HELO DNS Lookup Greylisting Banned Word

5.

A FortiGate unit is configured to receive push updates from the FortiGuard Distribution Network, however, updates are not being received. Which of the following statements are possible reasons for this? (Select all that apply.)

The external facing interface of the FortiGate unit is configured to use DHCP. The FortiGate unit has not been registered. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network and no override push IP is configured. The FortiGate unit is in Transparent mode which does not support push updates.

6.

Which of the following statements best describes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled?

The proxy will not allow a file to be transmitted in multiple streams simultaneously. The proxy sends the file to the server while simultaneously buffering it. If the file being scanned is determined to be infected, the proxy deletes it from the server by sending a delete command on behalf of the client. If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server.

7.

What are the valid sub-types for a Firewall type policy? (Select all that apply)

Device Identity Address User Identity Schedule SSL VPN

8.

In NAT/Route mode when there is no matching firewall policy for traffic to be forwarded by the Firewall, which of the following statements describes the action taken on traffic?

The traffic is blocked. The traffic is passed. The traffic is passed and logged. The traffic is blocked and logged.

9.

In which order are firewall policies processed on the FortiGate unit?

They are processed from the top down according to their sequence number. They are processed based on the policy ID number shown in the left hand column of the policy window. They are processed on best match. They are processed based on a priority value assigned through the priority column in the policy window.

10.

Which of the following pieces of information can be included in the Destination Address field of a firewall policy? (Select all that apply.)

An IP address pool. A virtual IP address. An actual IP address or an IP address group. An FQDN or Geographic value(s).

Fortinet Network Security Expert 5 Written (500) Set 1

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Network Security Expert 5 Written (500) Set 1

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner