Fortinet NSE5_FMG-6.4 Free Practice Questions

NEW QUESTION 1

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

• A. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device
• B. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.
• C. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondarydevices to point to the new primary device.
• D. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Answer: C

Explanation:
FortiManager_6.4_Study_Guide-Online – page 346
FortiManager HA doesn’t support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:
* 1. Manually reconfigure one of the secondary devices to become the primary device
* 2. Reconfigure all other secondary devices to point to the new primary device

NEW QUESTION 2

View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

• A. The unused objects that are not tied to the firewall policies will be installed on FortiGate
• B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
• C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
• D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database

Answer: C

Explanation:
Reference:
https://community.fortinet.com/t5/FortiManager/Import-all-objects-Versus-Import-only-policy-dependent-objec

NEW QUESTION 3

Refer to the exhibit.

You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)

• A. It will not create a new revision in the revision history
• B. It installs device-level changes to FortiGate without launching the Install Wizard
• C. It cannot be canceled once initiated and changes will be installed on the managed device
• D. It provides the option to preview configuration changes prior to installing them

Answer: BC

Explanation:
FortiManager_6.4_Study_Guide-Online – page 164
The Install Config option allows you to perform a quick installation of device-level settings without launching the Install Wizard. When you use this option, you cannot preview the changes prior to committing. Administrator should be certain of the changes before using this install option, because the install can’t be cancelled after the process is initiated.

NEW QUESTION 4

Which two statements regarding device management on FortiManager are true? (Choose two.)

• A. FortiGate devices in HA cluster devices are counted as a single device.
• B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
• C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
• D. The maximum number of managed devices for each ADOM is 500.

Answer: AC

NEW QUESTION 5

Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)

• A. Backs up all devices and the FortiGuard database.
• B. Does not back up firmware images saved on FortiManager
• C. Supports FTP, SCP, and SFTP
• D. Can be configured from the CLI and GUI

Answer: BC

NEW QUESTION 6

Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

• A. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.
• B. It disables concurrent read-write access to an ADOM.
• C. It allows the same administrator to lock more than one ADOM at the same time.
• D. It is used to validate administrator login attempts through external servers.

Answer: BC

Explanation:
Reference:
https://docs.fortinet.com/document/fortimanager/6.0.4/administration-guide/86456/concurrentadom-access

NEW QUESTION 7

You are moving managed FortiGate devices from one ADOM to a new ADOM. Which statement correctly describes the expected result?

• A. Any pending device settings will be installed automatically
• B. Any unused objects from a previous ADOM are moved to the new ADOM automatically
• C. The shared policy package will not be moved to the new ADOM
• D. Policy packages will be imported into the new ADOM automaticallyD

Answer: C

Explanation:
Reference:
https://community.fortinet.com/t5/FortiManager/Technical-Note-How-to-move-objects-to-new-ADOM-on-Forti

NEW QUESTION 8

View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

• A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
• B. Will not create new revision in the revision history
• C. Installs device-level changes to FortiGate without launching the Install Wizard
• D. Provides the option to preview configuration changes prior to installing them

Answer: AC

NEW QUESTION 9

View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the
Install On column?

• A. The Install On column value represents successful installation on the managed devices
• B. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
• C. Policy seq#3 will be installed on the Trainer[NAT] VDOM only
• D. Policy seq#3 will be not installed on any managed device

Answer: B

NEW QUESTION 10

When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

• A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
• B. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
• C. FortiGate will reject the CLI commands that will cause the tunnel to go down.
• D. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

Answer: A

Explanation:
Reference:
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/067f5236-ca6d-11e9-8977-005056925 page 17

NEW QUESTION 11

What does a policy package status of Modified indicate?

• A. FortiManager is unable to determine the policy package status
• B. The policy package was never imported after a device was registered on FortiManager
• C. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager
• D. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

Answer: D

Explanation:
Reference:
http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1200_Policy and Objects/080

NEW QUESTION 12

View the following exhibit:

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI)
option? (Choose two.)

• A. You must install these changes using Install Wizard
• B. FortiGate will auto-update the FortiManager’s device-level database.
• C. FortiManager will create a new revision history.
• D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

Answer: BC

NEW QUESTION 13

Which two items are included in the FortiManager backup? (Choose two.)

• A. FortiGuard database
• B. Global database
• C. Logs
• D. All devices

Answer: BD

Explanation:
Reference: https://kb.fortinet.com/kb/viewContent.do?externalId=FD34549

NEW QUESTION 14

Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?

• A. It allows FortiGate to unset central management settings.
• B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.
• C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.
• D. It allows FortiGate to reboot and restore a previously working firmware image.

Answer: B

Explanation:
Reference:
https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communicationsprotocol-guide/14

NEW QUESTION 15

What will be the result of reverting to a previous revision version in the revision history?

• A. It will install configuration changes to managed device automatically
• B. It will tag the device settings status as Auto-Update
• C. It will generate a new version ID and remove all other revision history versions
• D. It will modify the device-level database

Answer: D

NEW QUESTION 16

What is the purpose of ADOM revisions?

• A. To create System Checkpoints for the FortiManager configuration.
• B. To save the current state of the whole ADOM.
• C. To save the current state of all policy packages and objects for an ADOM.
• D. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

Answer: C

Explanation:
Fortimanager 6.4 Study guide page 198

NEW QUESTION 17

An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

• A. Trainer is not a part of workflow approval group
• B. Trainer does not have full rights over this ADOM
• C. Trainer must close Student’s workflow session before approving the request
• D. Student, who submitted the workflow session, must first self-approve the request

Answer: A

Explanation:
Reference:
https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/0800_ADOMs/1800_Workflow/0600_Workflow s

NEW QUESTION 18
......