Fortinet Network Security Expert 5 Written (500) Set 4

Question - 15 Maximum mark : - 29

Home
All Exams
Fortinet Network Security Expert 5 Written (500) Online Practice Exams
Fortinet Network Security Expert 5 Written (500) Set 4

Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.
config router static
edit 1
set dst 172.20.168.0 255.255.255.0
set distance 20
set priority 10
set device port1
next
edit 2
set dst 172.20.168.0 255.255.255.0
set distance 20
set priority 20
set device port2
next
end
Which of the following statements correctly describes the static routing configuration provided above?

The FortiGate unit will evenly share the traffic to 172.20.168.0/24 through both routes. ✘ The FortiGate unit will share the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic. ✘ The FortiGate unit will send all the traffic to 172.20.168.0/24 through port1. ✘ Only the route that is using port1 will show up in the routing table. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Examine the static route configuration shown below; then answer the question following it. config router static edit 1 set dst 172.20.1.0 255.255.255.0 set device port1 set gateway 172.11.12.1 set distance 10 set weight 5 next edit 2 set dst 172.20.1.0 255.255.255.0 set blackhole enable set distance 5 set weight 10 next end Which of the following statements correctly describes the static routing configuration provided? (Select all that apply.)

All traffic to 172.20.1.0/24 will always be dropped by the FortiGate unit. As long as port1 is up, all the traffic to 172.20.1.0/24 will be routed by the static route number 1. If the interface port1 is down, the traffic will be routed using theblackhole route. The FortiGate unit will NOT create a session entry in the session table when the traffic is being routed by the blackhole route. The FortiGate unit will create a session entry in the session table when the traffic is being routed by the blackhole route. Traffic to 172.20.1.0/24 will be shared through both routes.

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

In the case of TCP traffic, which of the following correctly describes the routing table lookups performed by a FortiGate unit when searching for a suitable gateway?

A look-up is done only when the first packet coming from the client (SYN) arrives. ✘ A look-up is done when the first packet coming from the client (SYN) arrives, and a second is performed when the first packet coming from the server (SYNC/ACK) arrives. ✘ A look-up is done only during the TCP 3-way handshake (SYNC, SYNC/ACK, ACK). ✘ A look-up is always done each time a packet arrives, from either the server or the client side. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Shown below is a section of output from the debug command diag ip arp list. index=2 ifname=port1 172.20.187.150 00:09:0f:69:03:7e state=00000004 use=4589 confirm=4589 update=2422 ref=1 In the output provided, which of the following best describes the IP address 172.20.187.150?

It is the primary IP address of the port1 interface. ✘ It is one of the secondary IP addresses of the port1 interface. ✘ It is the IP address of another network device located in the same LAN segment as the FortiGate units port1 interface. ✘

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following statements is correct regarding the NAC Quarantine feature?

With NAC quarantine, files can be quarantined not only as a result of antivirus scanning, but also for other forms of content inspection such as IPS and DLP. ✘ NAC quarantine does a client check on workstations before they are permitted to have administrative access to FortiGate. ✘ NAC quarantine allows administrators to isolate clients whose network activity poses a security risk. ✘ If you chose the quarantine action, you must decide whether the quarantine type is NAC quarantine or File quarantine. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following DLP actions will override any other action?

Exempt ✘ Quarantine Interface ✘ Block ✘ None ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following DLP actions will always be performed if it is selected?

Archive ✘ Quarantine Interface ✘ Ban Sender ✘ Block ✔ None ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

The transfer of encrypted files or the use of encrypted protocols between users and servers on the internet can frustrate the efforts of administrators attempting to monitor traffic passing through the FortiGate unit and ensuring user compliance to corporate rules. Which of the following items will allow the administrator to control the transfer of encrypted data through the FortiGate unit? (Select all that apply.)

Encrypted protocols can be scanned through the use of the SSL proxy. DLP rules can be used to block the transmission of encrypted files. Firewall authentication can be enabled in the firewall policy, preventing the use of encrypted communications channels. Application control can be used to monitor the use of encrypted protocols; alerts can be sent to the administrator through email when the use of encryptedprotocols is attempted.

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A DLP rule with an action of Exempt has been matched against traffic passing through the FortiGate unit. Which of the following statements is correct regarding how this transaction will be handled by the FortiGate unit?

Any other matched DLP rules will be ignored with the exception of Archiving. ✘ Future files whose characteristics match this file will bypass DLP scanning. ✘ The traffic matching the DLP rule will bypass antivirus scanning. ✘ The client IP address will be added to a white list. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

The following diagnostic output is displayed in the CLI:
diag firewall auth list
policy iD. 9, srC. 192.168.3.168, action: accept, timeout: 13427
user: forticlient_chk_only, group:
flag (80020): auth timeout_ext, flag2 (40): exact
group iD. 0, av group: 0
----- 1 listed, 0 filtered ------
Based on this output, which of the following statements is correct?

Firewall policy 9 has endpoint compliance enabled but not firewall authentication. ✘ The client check that is part of an SSL VPN connection attempt failed. ✘ This user has been associated with a guest profile as evidenced by the group id of 0. ✘ An auth-keepalive value has been enabled. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Fortinet Network Security Expert 5 Written (500) Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner