NO.1 Which of the following statements are TRUE for Port Pairing and Forwarding Domains? (Select
all that apply.)
A. They both create separate broadcast domains.
B. Port Pairing works only for physical interfaces.
C. Forwarding Domains only apply to virtual interfaces.
D. They may contain physical and/or virtual interfaces.
E. They are only available in high-end models.
Answer: A,D

Fortinet answers real questions   NSE5   NSE5   NSE5 Exam PDF

NO.2 A FortiGate 100 unit is configured to receive push updates from the FortiGuard Distribution
Network, however, updates are not being received. Which of the following statements are possible
reasons for this? (Select all that apply.)
A. The external facing interface of the FortiGate unit is configured to use DHCP.
B. The FortiGate unit has not been registered.
C. There is a NAT device between the FortiGate unit and the FortiGuard Distribution Network.
D. The FortiGate unit is in Transparent mode.
Answer: A,B,C

Fortinet pdf   NSE5 exam simulations   NSE5 Training online

NO.3 Which of the following Session TTL values will take precedence?
A. Session TTL specified at the system level for that port number
B. Session TTL specified in the matching firewall policy
C. Session TTL dictated by the application control list associated with the matching firewall policy
D. The default session TTL specified at the system level
Answer: C

Fortinet   NSE5 Real Questions   NSE5   NSE5 study guide

NO.4 Which of the following statements correctly describes the deepscan option for HTTPS?
A. When deepscan is disabled, only the web server certificate is inspected; no decryption of content
occurs.
B. Enabling deepscan will perform further checks on the server certificate.
C. Deepscan is only applicable to mail protocols, where all IP addresses in the header are checked.
D. With deepscan enabled, archived files will be decompressed before scanning for a more
comprehensive file inspection.
Answer: A

Fortinet Braindumps   NSE5 Exam Questions   NSE5 certification training

NO.5 An organization wishes to protect its SIP Server from call flooding attacks. Which of the
following configuration changes can be performed on the FortiGate unit to fulfill this requirement?
A. Apply an application control list which contains a rule for SIP and has the "Limit INVITE Request"
option configured.
B. Enable Traffic Shaping for the appropriate SIP firewall policy.
C. Reduce the session time-to-live value for the SIP protocol by running the configure system session-
ttl CLI command.
D. Run the set udp-idle-timer CLI command and set a lower time value.
Answer: A

Fortinet Exam PDF   NSE5 Braindumps   NSE5

NO.6 Which of the following features could be used by an administrator to block FTP uploads while
still allowing FTP downloads?
A. Anti-Virus File-Type Blocking
B. Data Leak Prevention
C. Network Admission Control
D. FortiClient Check
Answer: B

Fortinet original questions   NSE5 Practice Test   NSE5 Latest Dumps   NSE5 VCE Dumps

NO.7 A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and
SMB protocols using which inspection mode?
A. Proxy
B. DNS
C. Flow-based
D. Man-in-the-middle
Answer: C

Fortinet exam   NSE5 Exam Prep   NSE5 Exam Questions   NSE5 Exam Cost   NSE5 Study Guide

NO.8 Which of the following statements are correct regarding virtual domains (VDOMs)? (Select all
that apply.)
A. VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple,
independent units.
B. A management VDOM handles SNMP, logging, alert email, and FDN-based updates.
C. VDOMs share firmware versions, as well as antivirus and IPS databases.
D. Only administrative users with a 'super_admin' profile will be able to enter multiple VDOMs to
make configuration changes.
Answer: A,B,C

Fortinet test answers   NSE5 Actual Test   NSE5 test questions   NSE5 dumps torrent   NSE5   NSE5

BraindumpsQA's Fortinet NSE5 exam training material is the best training materials on the Internet. It is the leader in all training materials. It not only can help you to pass the exam , you can also improve your knowledge and skills. Help you in your career in your advantage successfully. As long as you have the Fortinet NSE5 certification, you will be treated equally by all countries.

BraindumpsQA can provide you with a reliable and comprehensive solution to pass Fortinet certification NSE5 exam. Our solution can 100% guarantee you to pass the exam, and also provide you with a one-year free update service. You can also try to free download the Fortinet certification NSE5 exam testing software and some practice questions and answers to on BraindumpsQA website.

When you select to use BraindumpsQA's products, you have set the first foot on the peak of the IT industry and the way to your dream is one step closer. The practice questions of BraindumpsQA can not only help you pass Fortinet certification NSE5 exam and consolidate your professional knowledge, but also provide you one year free update service.

BraindumpsQA's NSE5 exam training materials evoke great repercussions in the examinees, and has established a very good reputation, which means that choosing BraindumpsQA NSE5 exam training materials is to choose success. After you buy our NSE5 vce dumps, if you fail to pass the certification exam or there are any problems of learning materials, we will give a full refund. What's more, after you buy our NSE5 exam, we will provide one year free renewal service. 

BraindumpsQA offer the latest 600-501 exam material and high-quality 70-341 pdf questions & answers. Our 1z1-573 VCE testing engine and HP2-B100 study guide can help you pass the real exam. High-quality 1z0-460 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

NSE5 Exam Prep: http://blog.dumpguide.com/2015/06/30/nse5-test-questions-nse4-vce-dumps/