This page was exported from All The Latest MCTS Exam Questions And Answers For Free Share [ https://www.mctsdump.com ]

Export date:Thu Nov 21 11:50:31 2024 / +0000 GMT

___________________________________________________


Title: [2016-NEW!] 240q NSE5 Practice Test from PassLeader Guarantee 100% Passing Exam (Question 141 &ndash; Question 160)

---------------------------------------------------


PassLeader helps you to get well prepared for the NSE5 exam! Try PassLeader's new 240q NSE5 exam dumps with VCE test software or PDF braindumps now and you will get your NSE5 certification quickly. PassLeader's 240q NSE5 exam questions with all new NSE5 exam questions is the best study materials for preparing exam, we ensure that our full version NSE5 VCE dumps and PDF dumps will help you 100 percent passing NSE5 exam. First try the PassLeader valid NSE5 braindumps and first pass exam! keywords: NSE5 exam,240q NSE5 exam dumps,240q NSE5 exam questions,NSE5 pdf dumps,NSE5 vce dumps,NSE5 braindumps,NSE5 practice tests,NSE5 study guide,Fortinet Network Security Analyst Exam P.S. Download Free NSE5 PDF Dumps and Get Premium PassLeader NSE5 VCE Dumps At The End Of This Post!!! (Ctrl+End) QUESTION 141Which of the following statements correctly describe Transparent Mode operation? (Select all that apply.) A.&nbsp;&nbsp;&nbsp; The FortiGate unit acts as transparent bridge and routes traffic using Layer-2 forwarding.B.&nbsp;&nbsp;&nbsp; Ethernet packets are forwarded based on destination MAC addresses NOT IPs.C.&nbsp;&nbsp;&nbsp; The device is transparent to network hosts.D.&nbsp;&nbsp;&nbsp; Permits inline traffic inspection and firewalling without changing the IP scheme of the network.E.&nbsp;&nbsp;&nbsp; All interfaces must be on different IP subnets.  Answer: ABCD QUESTION 142How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.) A.&nbsp;&nbsp;&nbsp; File TypE. Microsoft Office(msoffice)B.&nbsp;&nbsp;&nbsp; File TypE. Archive(zip)C.&nbsp;&nbsp;&nbsp; File TypE. Unknown Filetype(unknown)D.&nbsp;&nbsp;&nbsp; File NamE. "*.ppt", "*.doc", "*.xls"E.&nbsp;&nbsp;&nbsp; File NamE. "*.pptx", "*.docx", "*.xlsx" Answer: BE QUESTION 143Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.config router staticedit 1set dst 172.20.168.0 255.255.255.0set distance 20set priority 10set device port1nextedit 2set dst 172.20.168.0 255.255.255.0set distance 20set priority 20set device port2nextendWhich of the following statements correctly describes the static routing configuration provided above? A.&nbsp;&nbsp;&nbsp; The FortiGate unit will evenly share the traffic to 172.20.168.0/24 through both routes.B.&nbsp;&nbsp;&nbsp; The FortiGate unit will share the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic.C.&nbsp;&nbsp;&nbsp; The FortiGate unit will send all the traffic to 172.20.168.0/24 through port1.D.&nbsp;&nbsp;&nbsp; Only the route that is using port1 will show up in the routing table. Answer: C QUESTION 144A FortiGate unit is configured with three Virtual Domains (VDOMs) as illustrated in the exhibit.Which of the following statements are true if the network administrator wants to route traffic between all the VDOMs? (Select all that apply.) A.&nbsp;&nbsp;&nbsp; The administrator should configure inter-VDOM links to avoid using external interfaces and routers.B.&nbsp;&nbsp;&nbsp; As with all FortiGate unit interfaces, firewall policies must be in place for traffic to be allowed to pass through any interface, including inter-VDOM links. This provides the same level of security internally as externally.C.&nbsp;&nbsp;&nbsp; This configuration requires the use of an external router.D.&nbsp;&nbsp;&nbsp; Inter-VDOM routing is automatically provided if all the subnets that need to be routed are locally attached.E.&nbsp;&nbsp;&nbsp; As each VDOM has an independant routing table, routing rules need to be set (for example, static routing, OSPF) in each VDOM to route traffic between VDOMs. Answer: ABE QUESTION 145A FortiGate administrator configures a Virtual Domain (VDOM) for a new customer. After creating the VDOM, the administrator is unable to reassign the dmz interface to the new VDOM as the option is greyed out in Web Config in the management VDOM. What would be a possible cause for this problem? A.&nbsp;&nbsp;&nbsp; The dmz interface is referenced in the configuration of another VDOM.B.&nbsp;&nbsp;&nbsp; The administrator does not have the proper permissions to reassign the dmz interface.C.&nbsp;&nbsp;&nbsp; Non-management VDOMs can not reference physical interfaces.D.&nbsp;&nbsp;&nbsp; The dmz interface is in PPPoE or DHCP mode.E.&nbsp;&nbsp;&nbsp; Reassigning an interface to a different VDOM can only be done through the CLI. Answer: A QUESTION 146Which of the following statements is correct based on the firewall configuration illustrated in the exhibit? A.&nbsp;&nbsp;&nbsp; A user can access the Internet using only the protocols that are supported by user authentication.B.&nbsp;&nbsp;&nbsp; A user can access the Internet using any protocol except HTTP, HTTPS, Telnet, and FTP. These require authentication before the user will be allowed access.C.&nbsp;&nbsp;&nbsp; A user must authenticate using the HTTP, HTTPS, SSH, FTP, or Telnet protocol before they can access any services.D.&nbsp;&nbsp;&nbsp; A user cannot access the Internet using any protocols unless the user has passed firewall authentication. Answer: D QUESTION 147Which of the following features could be used by an administrator to block FTP uploads while still allowing FTP downloads? A.&nbsp;&nbsp;&nbsp; Anti-Virus File-Type BlockingB.&nbsp;&nbsp;&nbsp; Data Leak PreventionC.&nbsp;&nbsp;&nbsp; Network Admission ControlD.&nbsp;&nbsp;&nbsp; FortiClient Check Answer: B QUESTION 148Bob wants to send Alice a file that is encrypted using public key cryptography. Which of the following statements is correct regarding the use of public key cryptography in this scenario? A.&nbsp;&nbsp;&nbsp; Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file.B.&nbsp;&nbsp;&nbsp; Bob will use his public key to encrypt the file and Alice will use Bob's private key to decrypt the file.C.&nbsp;&nbsp;&nbsp; Bob will use Alice's public key to encrypt the file and Alice will use her private key to decrypt the file.D.&nbsp;&nbsp;&nbsp; Bob will use his public key to encrypt the file and Alice will use her private key to decrypt the file.E.&nbsp;&nbsp;&nbsp; Bob will use Alice's public key to encrypt the file and Alice will use Bob's public key to decrypt the file. Answer: C QUESTION 149An administrator has formed a High Availability cluster involving two FortiGate 310B units.[Multiple upstream Layer 2 switches] -- [ FortiGate HA Cluster ] -- [ Multiple downstream Layer 2 switches ]The administrator wishes to ensure that a single link failure will have minimal impact upon the overall throughput of traffic through this cluster. Which of the following options describes the best step the administrator can take? The administrator should____. A.&nbsp;&nbsp;&nbsp; set up a full-mesh design which uses redundant interfaces.B.&nbsp;&nbsp;&nbsp; increase the number of FortiGate units in the cluster and configure HA in Active-Active mode.C.&nbsp;&nbsp;&nbsp; enable monitoring of all active interfaces.D.&nbsp;&nbsp;&nbsp; configure the HA ping server feature to allow for HA failover in the event that a path is disrupted. Answer: A QUESTION 150Which of the following statements best decribes the proxy behavior on a FortiGate unit during an FTP client upload when FTP splice is disabled? A.&nbsp;&nbsp;&nbsp; The proxy buffers the entire file from the client, only sending the file to the server if the file is clean. One possible consequence of buffering is that the server could time out.B.&nbsp;&nbsp;&nbsp; The proxy sends the file to the server while simultaneously buffering it.C.&nbsp;&nbsp;&nbsp; The proxy removes the infected file from the server by sending a delete command on behalf of the client.D.&nbsp;&nbsp;&nbsp; If the file being scanned is determined to be clean, the proxy terminates the connection and leaves the file on the server. Answer: A QUESTION 151Which of the following DLP actions will always be performed if it is selected? A.&nbsp;&nbsp;&nbsp; ArchiveB.&nbsp;&nbsp;&nbsp; Quarantine InterfaceC.&nbsp;&nbsp;&nbsp; Ban SenderD.&nbsp;&nbsp;&nbsp; BlockE.&nbsp;&nbsp;&nbsp; NoneF.&nbsp;&nbsp;&nbsp; BanG.&nbsp;&nbsp;&nbsp; Quarantine IP Address Answer: A QUESTION 152The following ban list entry is displayed through the CLI.get user ban listid cause src-ip-addr dst-ip-addr expires created531 protect_client 10.177.0.21 207.1.17.1 indefinite Wed Dec 24 :21:33 2008Based on this command output, which of the following statements is correct? A.&nbsp;&nbsp;&nbsp; The administrator has specified the Attack and Victim Address method for the quarantine.B.&nbsp;&nbsp;&nbsp; This diagnostic entry results from the administrator running the diag ips log test command. This command has no effect on traffic.C.&nbsp;&nbsp;&nbsp; A DLP rule has been matched.D.&nbsp;&nbsp;&nbsp; An attack has been repeated more than once during the holddown period; the expiry time has been reset to indefinite. Answer: A QUESTION 153The Host Check feature can be enabled on the FortiGate unit for SSL VPN connections. When this feature is enabled, the FortiGate unit probes the remote host computer to verify that it is "safe" before access is granted. Which of the following items is NOT an option as part of the Host Check feature? A.&nbsp;&nbsp;&nbsp; FortiClient Antivirus softwareB.&nbsp;&nbsp;&nbsp; Microsoft Windows Firewall softwareC.&nbsp;&nbsp;&nbsp; FortiClient Firewall softwareD.&nbsp;&nbsp;&nbsp; Third-party Antivirus software Answer: B QUESTION 154An administrator configures a VPN and selects the Enable IPSec Interface Mode option in the phase 1 settings. Which of the following statements are correct regarding the IPSec VPN configuration? A.&nbsp;&nbsp;&nbsp; To complete the VPN configuration, the administrator must manually create a virtual IPSec interface in Web Config under System &gt; Network.B.&nbsp;&nbsp;&nbsp; The virtual IPSec interface is automatically created after the phase1 configuration.C.&nbsp;&nbsp;&nbsp; The IPSec policies must be placed at the top of the list.D.&nbsp;&nbsp;&nbsp; This VPN cannot be used as part of a hub and spoke topology.E.&nbsp;&nbsp;&nbsp; Routes were automatically created based on the address objects in the firewall policies. Answer: B QUESTION 155A FortiClient fails to establish a VPN tunnel with a FortiGate unit.The following information is displayed in the FortiGate unit logs:msg="Initiator: sent 192.168.11.101 main mode message #1 (OK)"msg="Initiator: sent 192.168.11.101 main mode message #2 (OK)"msg="Initiator: sent 192.168.11.101 main mode message #3 (OK)"msg="Initiator: parsed 192.168.11.101 main mode message #3 (DONE)"msg="Initiator: sent 192.168.11.101 quick mode message #1 (OK)"msg="Initiator: tunnel 192.168.1.1/192.168.11.101 install ipsec sa"msg="Initiator: sent 192.168.11.101 quick mode message #2 (DONE)"msg="Initiator: tunnel 192.168.11.101, transform=ESP_3DES, HMAC_MD5"msg="Failed to acquire an IP addressWhich of the following statements is a possible cause for the failure to establish the VPN tunnel? A.&nbsp;&nbsp;&nbsp; An IPSec DHCP server is not enabled on the external interface of the FortiGate unit.B.&nbsp;&nbsp;&nbsp; There is no IPSec firewall policy configured for the policy-based VPN.C.&nbsp;&nbsp;&nbsp; There is a mismatch between the FortiGate unit and the FortiClient IP addresses in the phase 2 settings.D.&nbsp;&nbsp;&nbsp; The phase 1 configuration on the FortiGate unit uses Aggressive mode while FortiClient uses Main mode. Answer: A QUESTION 156A static route is configured for a FortiGate unit from the CLI using the following commands:config router staticedit 1set device "wan1"set distance 20set gateway 192.168.100.1nextendWhich of the following conditions is NOT required for this static default route to be displayed in the FortiGate unit's routing table? A.&nbsp;&nbsp;&nbsp; The Administrative Status of the wan1 interface is displayed as Up.B.&nbsp;&nbsp;&nbsp; The Link Status of the wan1 interface is displayed as Up.C.&nbsp;&nbsp;&nbsp; All other default routes should have an equal or higher distance.D.&nbsp;&nbsp;&nbsp; You must disable DHCP client on that interface. Answer: D QUESTION 157Which of the following methods does the FortiGate unit use to determine the availability of a web cache using Web Cache Communication Protocol (WCCP)? A.&nbsp;&nbsp;&nbsp; The FortiGate unit receives periodic "Here I am" messages from the web cache.B.&nbsp;&nbsp;&nbsp; The FortiGate unit polls all globally-defined web cache servers at a regular intervals.C.&nbsp;&nbsp;&nbsp; The FortiGate using uses the health check monitor to verify the availability of a web cache server.D.&nbsp;&nbsp;&nbsp; The web cache sends an "I see you" message which is captured by the FortiGate unit. Answer: C QUESTION 158Which of the following statements correctly describes the deepscan option for HTTPS? A.&nbsp;&nbsp;&nbsp; When deepscan is disabled, only the web server certificate is inspected; no decryption of content occurs.B.&nbsp;&nbsp;&nbsp; Enabling deepscan will perform further checks on the server certificate.C.&nbsp;&nbsp;&nbsp; Deepscan is only applicable to mail protocols, where all IP addresses in the header are checked.D.&nbsp;&nbsp;&nbsp; With deepscan enabled, archived files will be decompressed before scanning for a more comprehensive file inspection. Answer: A QUESTION 159When performing a log search on a FortiAnalyzer, it is generally recommended to use the Quick Search option. What is a valid reason for using the Full Search option, instead? A.&nbsp;&nbsp;&nbsp; The search items you are looking for are not contained in indexed log fields.B.&nbsp;&nbsp;&nbsp; A quick search only searches data received within the last 24 hours.C.&nbsp;&nbsp;&nbsp; You want the search to include the FortiAnalyzer's local logs.D.&nbsp;&nbsp;&nbsp; You want the search to include content archive data as well. Answer: A QUESTION 160Which spam filter is not available on a FortiGate device? A.&nbsp;&nbsp;&nbsp; Sender IP reputation databaseB.&nbsp;&nbsp;&nbsp; URLs included in the body of known SPAM messagesC.&nbsp;&nbsp;&nbsp; Email addresses included in the body of known SPAM messagesD.&nbsp;&nbsp;&nbsp; Spam object checksumsE.&nbsp;&nbsp;&nbsp; Spam grey listing Answer: E Download Free NSE5 PDF Dumps From Google Drive: https://drive.google.com/open?id=0B-ob6L_QjGLpU0FrbTh1X3JMSmM Download New NSE5 VCE Dumps From PassLeader: http://www.passleader.com/nse5.html (New Questions Are 100% Available and Wrong Answers Have Been Corrected!!!)

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2016-05-13 08:02:46

Post date GMT: 2016-05-13 08:02:46

Post modified date: 2016-05-13 08:02:46

Post modified date GMT: 2016-05-13 08:02:46



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com