Fortinet Fortinet Certifications NSE5_FMG-5.4 Questions & Answers

• Question 1:

  View the following exhibit:

  

  When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

  A. Will not create new revision in the revision history.

  B. Provides the option to preview configuration changes prior to installing them.

  C. Installs device-level changes to FortiGate without launching the Install Wizard.

  D. Once installed, the install process cannot be canceled and changes will be installed on the managed device.

  Correct Answer: CD

• Question 2:

  View the following exhibit:

  

  Which of the following statements are true if both FortiManager and FortiGate are behind the NAT devices? (Choose two.)

  A. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

  B. If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

  C. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

  D. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

  Correct Answer: BC

• Question 3:

  View the following exhibit:

  

  Which one of the following statements is true regarding the object named ALL?

  A. FortiManager updated the object ALL using FortiManager's value in its database.

  B. FortiManager updated the object ALL using FortiGate's value in its database.

  C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

  D. FortiManager installed the object ALL with the updated value.

  Correct Answer: B

• Question 4:

  View the following exhibit:

  

  An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session. What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

  A. Trainer must close Student's workflow session before approving the request.

  B. Trainer does not have full rights over this ADOM.

  C. Trainer is not a part of workflow approval group.

  D. Student, who submitted the workflow session, must first self-approve the request.

  Correct Answer: C

• Question 5:

  View the following exhibit:

  

  What of the following statements are true regarding the output? (Choose two.)

  A. Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed.

  B. The latest revision history for the managed FortiGate does match with the FortiGate running configuration.

  C. The latest revision history for the managed FortiGate does not match with the device-level database.

  D. Configuration changes directly made on the FortiGate have been automatically updated to device-level database.

  Correct Answer: BC

• Question 6:

  View the following exhibit:

  

  Which statement is true regarding this failed installation log?

  A. Policy ID 2 is installed without a source address.

  B. Policy ID 2 is installed without a source device.

  C. Policy ID 2 will not be installed.

  D. Policy ID 2 is installed in disabled state.

  Correct Answer: A

• Question 7:

  View the following exhibit, which shows the Download Import Report:

  

  Why it is failing to import firewall policy ID 2?

  A. The address object used in policy ID 2 already exist in ADOM database with any as interface association and conflicts with address object interface association locally on the FortiGate.

  B. Policy ID 2 is configured from interface any to port6. FortiManager rejects to import this policy because any interface does not exist on FortiManager.

  C. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

  D. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager.

  Correct Answer: B

• Question 8:

  View the following exhibit.

  

  Which of the following statements are true based on this configuration setting? (Choose two.)

  A. This setting will enable the ADOMs feature on FortiManager.

  B. This setting is applied globally to all ADOMs.

  C. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

  D. This setting will allow automatic updates to the policy package configuration for a managed device.

  Correct Answer: BC

• Question 9:

  View the following exhibit:

  

  An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

  A. 192.168.0.1/24

  B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

  C. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

  D. 10.0.1.0/24

  Correct Answer: D

• Question 10:

  View the following exhibit:

  

  Which of the following statements are true if the script is executed using Remote FortiGate Directly(via CLI) option? (Choose two)

  A. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

  B. FortiManager will create a new revision history.

  C. FortiManager will auto-update FortiManager's device-level database.

  D. You must install these changes using Install Wizard.

  Correct Answer: AC