Certbus > Fortinet > Fortinet Other Certification > NSE5_FMG-6.0 > NSE5_FMG-6.0 Online Practice Questions and Answers

NSE5_FMG-6.0 Online Practice Questions and Answers

Questions 4

What does the diagnose dvm check-integrity command do? (Choose two.)

A. Internally upgrades existing ADOMs to the same ADOM version in order to clean up and correct the ADOM syntax

B. Verifies and corrects unregistered, registered, and deleted device states

C. Verifies and corrects database schemas in all object tables

D. Verifies and corrects duplicate VDOM entries

Browse 35 Q&As
Questions 5

View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

A. FortiManager updated the object ALL using FortiGate's value in its database

B. FortiManager updated the object ALL using FortiManager's value in its database

C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this

managed FortiGate.

D. FortiManager installed the object ALL with the updated value.

Browse 35 Q&As
Questions 6

View the following exhibit:

How will FortiManager try to get updates for antivirus and IPS?

A. From the list of configured override servers with ability to fall back to public FDN servers

B. From the configured override server list only

C. From the default server fdsl.fortinet.com

D. From public FDNI server with highest index number only

Browse 35 Q&As
Questions 7

View the following exhibit.

What of the following statements are true regarding the output? (Choose two.)

A. The latest revision history for the managed FortiGate does match with the FortiGate running configuration

B. Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

C. The latest history for the managed FortiGate does not match with the device-level database

D. Configuration changes directly made on the FortiGate have been automatically updated to device-level

database

Browse 35 Q&As
Questions 8

A. port2

B. virtual-wan-link

C. port1

D. auto-discovery

Browse 35 Q&As
Questions 9

View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

Browse 35 Q&As
Questions 10

View the following exhibit.

Based on the configuration setting, which one of the following statements is true?

A. The setting allows automatic updates to the policy package configuration for a managed device

B. The setting enables the ADOMs feature on FortiManager

C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

D. The setting disables concurrent ADOM access and adds ADOM locking

Browse 35 Q&As
Questions 11

An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?

A. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route

B. You must specify a gateway address when you create a default static route

C. Remove all the interface references such as routes or policies

D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SD-WAN firewall policies.

Browse 35 Q&As
Questions 12

Which of the following statements are true regarding SD-WAN Central Management? (Choose three.)

A. SD-WAN must be enabled on per-ADOM basis

B. SD-WAN settings can be installed on multiple FortiGate devices at the same time

C. You can create multiple SD-WAN interfaces per VDOM

D. When you configure an SD-WAN, you must specify at least two member interfaces.

E. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

Browse 35 Q&As
Questions 13

Refer to the following exhibit:

Which of the following statements are true based on this configuration? (Choose two.)

A. The same administrator can lock more than one ADOM at the same time

B. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out

C. Unlocking an ADOM will submit configuration changes automatically to the approval administrator

D. Unlocking an ADOM will install configuration automatically on managed devices

Browse 35 Q&As
Questions 14

View the following exhibit: Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)

A. You must install these changes using Install Wizard

B. FortiGate will auto-update the FortiManager's device-level database.

C. FortiManager will create a new revision history.

D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

Browse 35 Q&As
Questions 15

View the following exhibit.

Which one of the following statements is true regarding installation targets in use Install On column?

A. The Install On column value represents successful installation on the managed devices

B. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

C. Policy seq#3 will be installed on the Trainer[NAT] VDOM only

D. Policy seq#3 will be not installed on any managed device

Browse 35 Q&As
Questions 16

An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the approving a workflow session?

A. Trainer is not a part of workflow approval group

B. Trainer does not have full rights over this ADOM

C. Trainer must close Student's workflow session before approving the request

D. Student, who submitted the workflow session, must first self-approve the request

Browse 35 Q&As
Questions 17

View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

A. The unused objects that are not tied to the firewall policies will be installed on FortiGate

B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database

Browse 35 Q&As
Questions 18

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. 10.0.1.0/24

B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

C. 192.168.0.1/24

D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.

Browse 35 Q&As
Exam Code: NSE5_FMG-6.0
Exam Name: Fortinet NSE 5 - FortiManager 6.0
Last Update: Mar 19, 2024
Questions: 35 Q&As

PDF

$45.99

VCE

$49.99

PDF + VCE

$59.99