Fortinet NSE5_FMG-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-5.4 Online Questions & Answers

• Question 1:

  What are the factory default settings on FortiManager? (Choose three.)

  A. Password is fortinet
  B. port1 interface IP address is 192.168.1.99/24
  C. Service Access is enabled on port1
  D. Username is admin
  E. Reports and Event Monitor panes are enabled
  B. port1 interface IP address is 192.168.1.99/24
  C. Service Access is enabled on port1
  D. Username is admin

• Question 2:

  An administrator has assigned a global policy package to custom ADOM1. What will happen if the administrator tries to create a new policy package in custom ADOM1?

  A. When a new policy package is created, you need to reapply the global policy package to the ADOM.
  B. When creating a new policy package, can select the option to assign the global policies to the new package.
  C. When a new policy package is created, it automatically assigns the global policies to the new package.
  D. When a new policy package is created, you must assign the global policy package from the global ADOM.
  C. When a new policy package is created, it automatically assigns the global policies to the new package.

• Question 3:

  Which of the following statements are true regarding an FGFM keepalive message? (Choose two.)

  A. It includes the configuration checksum of FortiGate.
  B. The keepalive interval for keepalive messages is configured on FortiGate.
  C. It is sent only by FortiGate.
  D. It is used between FortiManager HA cluster members to make sure cluster members are in sync.
  A. It includes the configuration checksum of FortiGate.
  C. It is sent only by FortiGate.

• Question 4:

  An administrator's PC crashed before the administrator could submit a workflow session for approval. After the PC restarted, the administrator noticed that the ADOM was locked from the session before the crash. How can the administrator unlock the ADOM?

  A. The administrator must log in as Super_User in order to unlock the ADOM.
  B. The administrator must restore the configuration from a previous backup.
  C. Delete the previous admin session manually through the FortiManager's GUI or CLI.
  D. The administrator must log in using the same administrator account to unlock the ADOM
  D. The administrator must log in using the same administrator account to unlock the ADOM

• Question 5:

  View the following exhibit:

  

  Which one of the following statements is true regarding installation targets in the Install On column?

  A. Policy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets.
  B. Policy seq.# 3 will be installed on the Trainer[NAT] VDOM only.
  C. Policy seq.# 3 will not be installed on any managed device.
  D. The Install On column value represents successful installations on the managed devices.
  B. Policy seq.# 3 will be installed on the Trainer[NAT] VDOM only.

• Question 6:

  View the following exhibit:

  

  An administrator is importing a new device to FortiManager and has selected the shown options.

  What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

  A. The unused objects that are not tied to the firewall policies will be installed on FortiGate.
  B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate.
  C. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database.
  D. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted.
  A. The unused objects that are not tied to the firewall policies will be installed on FortiGate.

• Question 7:

  View the following exhibit:

  

  An administrator logs in to the FortiManager GUI and sees these panes. Which of the following can be the reason the FortiAnalyzer feature panes don't appear? (Choose two.)

  A. The administrator IP address is not a part of the trusted hosts configured on FortiManager's interfaces.
  B. FortiAnalyzer features are not enabled on FortiManager.
  C. The administrator logged in using unsecure protocol HTTP, so the view is restricted.
  D. The administrator profile does not have full access privileges like the Super_User profile
  A. The administrator IP address is not a part of the trusted hosts configured on FortiManager's interfaces.
  B. FortiAnalyzer features are not enabled on FortiManager.

• Question 8:

  In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration request to FortiManager from a remote FortiGate. Which one of the following statements is true?

  A. The FortiGate will be automatically added to the Training ADOM.
  B. By default, the unregistered FortiGate will appear in the root ADOM.
  C. The FortiManager administrator must add the unregistered device manually to the Training ADOM using the Add Device wizard.
  D. The FortiGate will be added automatically to the default ADOM named FortiGate.
  B. By default, the unregistered FortiGate will appear in the root ADOM.

• Question 9:

  Which of the following statements are true regarding VPN Manager? (Choose three.)

  A. VPN Manager must be enabled on a per ADOM basis.
  B. VPN Manager automatically adds newly-registered devices to a VPN community.
  C. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
  D. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
  E. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
  A. VPN Manager must be enabled on a per ADOM basis.
  C. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
  D. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

• Question 10:

  How are the points calculated when using FortiMeter to deploy FortiOS-VM? (Choose two.)

  A. Based on the number of sessions on the mgmt interface of FortiOS-VM.
  B. Based on the FortiGuard service option enabled for FortiOS-VM.
  C. Based on the traffic usage on port1 and port2 on FortiOS-VM.
  D. Based on the amount of traffic (per GB) passing through the FortiOS-VM.
  B. Based on the FortiGuard service option enabled for FortiOS-VM.
  D. Based on the amount of traffic (per GB) passing through the FortiOS-VM.