Free Fortinet NSE5 Exam Dumps Questions & Answers

Which of the following statements is correct regarding the FortiGuard Services Web Filtering Override configuration as illustrated in the exhibit?

• A.A client with an IP of address 10.10.10.12 is allowed access to any subdirectory that is part of the www.yahoo.com web site.
• B.Any client on the same subnet as the authenticated user is allowed to access www.yahoo.com/images/ until August 7, 2009.
• C.A client with an IP address of 10.10.10.12 is allowed access to the
  www.yahoo.com/images/ web site and any of its offsite URLs.
• D.A client with an IP address of 10.10.10.12 is allowed access to any URL under the www.yahoo.com web site, including any subdirectory URLs, until August 7, 2009.
• E.Any client on the same subnet as the authenticated user is allowed to access www.yahoo.com/images/.

What effect do administrative domains (ADOM) have on report settings? (Choose two.)

• A.None. ADOMs cannot be used with reports.
• B.Chart Library, Macro Library, Dataset Library, and Output Profile become ADOM- specific.
• C.Reports must be configured within their own ADOM.
• D.Dataset Library becomes global for all ADOMs.

A portion of the device listing for a FortiAnalyzer unit is displayed in the exhibit.

Which of the following statements best describes the reason why the FortiGate 60B unit is unable to archive data to the FortiAnalyzer unit?

• A.The FortiGate unit is considered an unregistered device.
• B.The FortiGate unit is being treated as a syslog device and is only permitted to send log data.
• C.The FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the administrator.
• D.The FortiGate unit has insufficient privileges. The administrator should edit the device entry in the FortiAnalyzer and modify the privileges.

WAN optimization is configured in Active/Passive mode. When will the remote peer accept an attempt to initiate a tunnel?

• A.The attempt will be accepted when there is a matching WAN optimization passive rule.
• B.The attempt will be accepted when a user on the remote peer accepts the connection request.
• C.The attempt will be accepted when the request comes from a known peer.
• D.The attempt will be accepted when the request comes from a known peer and there is a matching WAN optimization passive rule.

A network administrator connects his PC to the INTERNAL interface on a FortiGate unit.
The administrator attempts to make an HTTPS connection to the FortiGate unit on the VLAN1 interface at the IP address of 10.0.1.1, but gets no connectivity.
The following troubleshooting commands are executed from the DOS prompt on the PC and from the CLI.
C:\>ping 10.0.1.1
Pinging 10.0.1.1 with 32 bytes of data:
Reply from 10.0.1.1: bytes=32 time=1ms TTL=255
Reply from 10.0.1.1: bytes=32 time<1ms TTL=255
Reply from 10.0.1.1: bytes=32 time<1ms TTL=255
Reply from 10.0.1.1: bytes=32 time<1ms TTL=255
user1 # get system interface
= = [ internal ]
name. internal mode. static ip: 10.0.1.254 255.255.255.128 status: up
netbios-forward. disable type. physical mtu-override. disable
= = [ vlan1 ]
name. vlan1 mode. static ip: 10.0.1.1 255.255.255.128 status: up netb
ios-forward. disable type. vlan mtu-override. disable
user1 # diagnose debug flow trace start 100
user1 # diagnose debug ena
user1 # diagnose debug flow filter daddr 10.0.1.1 10.0.1.1
id=20085 trace_id=274 msg="vd-root received a packet(proto=6, 10.0.1.130:47927-
> 10.0.1.1:443) from internal."
id=20085 trace_id=274 msg="allocate a new session-00000b1b"
id=20085 trace_id=274 msg="find SNAT: IP-10.0.1.1, port-43798"
id=20085 trace_id=274 msg="iprope_in_check() check failed, drop"
Based on the output from these commands, which of the following explanations is a possible cause of the problem?

• A.The PC is using an incorrect default gateway IP address.
• B.The Fortigate unit has no route back to the PC.
• C.The FortiGate unit does not have the HTTPS service configured on the VLAN1 interface.
• D.The PC has an IP address in the wrong subnet.
• E.There is no firewall policy allowing traffic from INTERNAL-> VLAN1.