NSE5 試験問題を無料オンラインアクセス

An administrator is configuring a DLP rule for FTP traffic. When adding the rule to a DLP sensor, the administrator notes that the Ban Sender action is not available (greyed-out), as shown in the exhibit.

Which of the following is the best explanation for the Ban Sender action NOT being available?

• A.The Ban Sender action is never available for FTP traffic.
• B.Firewall policy authentication is required before the Ban Sender action becomes available.
• C.The Ban Sender action needs to be enabled globally for FTP traffic on the FortiGate unit before configuring the sensor.
• D.The Ban Sender action is only available for known domains. No domains have yet been added to the domain list.

Which of the following DLP actions will override any other action?

• A.Block
• B.Exempt
• C.None
• D.Quarantine Interface

An administrator sets up a new FTP server on TCP port 2121. A FortiGate unit is located between the FTP clients and the server. The administrator has created a policy for TCP port 2121.
Users have been complaining that when downloading data they receive a 200 Port command successful message followed by a 425 Cannot build data connection message.
Which of the following statements represents the best solution to this problem?

• A.Place the client and server interface in the same zone and enable intra-zone traffic.
• B.Create a new session helper for the FTP service monitoring port 2121.
• C.Enable the ANY service in the firewall policies for both incoming and outgoing traffic.
• D.Disable any protection profiles being applied to FTP traffic.

Which statements are true regarding securing communications between FortiAnalyzer and FortiGate with SSL? (Choose two.)

• A.SSL communications are auto-negotiated between the two devices.
• B.FortiAnalyzer encryption level must be equal to, or higher than, FortiGate.
• C.SSL encryption levels are globally set on FortiAnalyzer.
• D.SSL can send logs in real-time only.
• E.SSL is the default setting.

Which of the following must be configured on a FortiGate unit to redirect content requests to remote web cache servers?

• A.WCCP must be enabled on the interface facing the Web cache.
• B.WCCP must be enabled as a global setting on the FortiGate unit.
• C.You must enabled explicit Web-proxy on the incoming interface.
• D.WCCP must be enabled on all interfaces on the FortiGate unit through which HTTP traffic is passing.