NSE5 試験問題を無料オンラインアクセス

What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)

• A.Both secure communications methods (SSL and IPsec) allow the store and upload option.
• B.Disk logging is enabled by default on the FortiGate.
• C.Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.
• D.All FortiGates can send logs to FortiAnalyzer using the store and upload option.
• E.Disk logging is enabled on the FortiGate through the CLI only.

What advantages are there in using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply.)

• A.Using a hub and spoke topology reduces the number of tunnels.
• B.Using a hub and spoke topology simplifies configuration.
• C.Using a hub and spoke topology provides stronger encryption.
• D.Using a hub and spoke topology is required to achieve full redundancy.

Which two statements are correct regarding FortiGate-FortiManager (FGFM) management protocol? (Choose two.)

• A.A secure communication is established between FortiManager and the managed device on port TCP 541.
• B.A secure communication is established between FortiManager and the managed device on port TCP 514.
• C.Once the FortiGate is managed, the FGFM tunnel is authenticated and established using the IP address of FortiGate device.
• D.The FGFM daemons run on both FortiGate (fgfmd) and FortiManager (fgfmsd).

Which of the following components are contained in all FortiGate units from the FG50 models and up? (Select all that apply.)

• A.Serial console port.
• B.FortiASIC content processor.
• C.Gigabit network interfaces.
• D.Hard Drive.

Which of the following items are considered to be advantages of using the application control features on the FortiGate unit?
Application control allows an administor to:

• A.customize application types in a similar way to adding custom IPS signatures.
• B.check which applications are installed on workstations attempting to access the network.
• C.enable AV scanning per application rather than per policy.
• D.set a unique session-ttl for select applications.