Fortinet NSE5_FMG-5.4 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-5.4 Online Questions & Answers

• Question 1:

  What does the diagnose dvm check-integrity command do? (Choose two.)

  A. Verifies and corrects database schemas in all object tables.
  B. Internally upgrades existing ADOMs to the same ADOM version in order to clean up and correct the ADOM syntax.
  C. Verifies and corrects duplicate VDOM entries.
  D. Verifies and corrects unregistered, registered, and deleted device states.
  C. Verifies and corrects duplicate VDOM entries.
  D. Verifies and corrects unregistered, registered, and deleted device states.

• Question 2:

  Which of the following statements are true regarding device management on FortiManager? (Choose two.)

  A. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
  B. The maximum number of managed devices for each ADOM is 500.
  C. FortiGate devices in HA cluster devices are counted as a single device.
  D. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
  C. FortiGate devices in HA cluster devices are counted as a single device.
  D. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

• Question 3:

  What does a policy package status of Conflict indicate?

  A. Policy package configuration has been changed on both FortiManager and the managed device independently.
  B. The policy package reports inconsistencies and conflicts during a Policy Consistency Check
  C. The policy package doesn't have a FortiGate as the installation target.
  D. Policy configuration has never been imported after a device was registered on FortiManager
  B. The policy package reports inconsistencies and conflicts during a Policy Consistency Check

• Question 4:

  An administrator is replacing a device on FortiManager by running the following command: execute device replace sn . What device name and serial number must the administrator use?

  A. Device name of the original device and serial number of the replacement device.
  B. Device name and serial number of the replacement device.
  C. Both device name and serial number of the original device. The administrator must update the hostname manually on the replacement device to match the device name currently on FortiManager.
  D. Device name of the replacement device and serial number of the original device.
  A. Device name of the original device and serial number of the replacement device.

• Question 5:

  Which of the following statements about the Policy Check feature on FortiManager is true?

  A. It provides recommendation to combine similar policy packages within a ADOM into one single policy package.
  B. It compares the policy packages with the revision history, and updates policy packages in the ADOM database.
  C. It provides recommendation for optimizing policies in a policy package.
  D. It merges and creates dynamic mapping for duplicate objects used in a policy package.
  C. It provides recommendation for optimizing policies in a policy package.

• Question 6:

  An administrator configured a new firewall policy on FortiManager and has yet pushed to the managed FortiGate. In which database will the configuration be saved?

  A. Configuration-level database
  B. Device-level database
  C. ADOM-level database
  D. Revision history database
  B. Device-level database

• Question 7:

  What is the purpose of the ADOM revisions?

  A. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision.
  B. To create System Checkpoints for the FortiManager configuration.
  C. To save the current state of all policy packages and objects for an ADOM.
  D. To save the current state of the whole ADOM.
  C. To save the current state of all policy packages and objects for an ADOM.

• Question 8:

  An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

  A. Allows FortiManager to run real-time debugs on the managed devices.
  B. Allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.
  C. Allows FortiManager to automatically configure a default route.
  D. Allows FortiManager to download IPS packages.
  B. Allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.

• Question 9:

  An administrator has assigned a global policy package to custom ADOM1. Then the administrator created a new policy package, Fortinet, in the custom ADOM1. Which one of the following statements is true regarding global policy package assignment to the newly-created policy package Fortinet?

  A. When a new policy package is created, you need to reapply the global policy package to the ADOM.
  B. When a new policy package is created, it automatically assigns the global policies to the new package.
  C. When a new policy package is created, you need to assign the global policy package from the global ADOM.
  D. When a new policy package is created, you can select the option to assign the global policies to the new package.
  B. When a new policy package is created, it automatically assigns the global policies to the new package.

• Question 10:

  Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

  A. To push these changes to a managed device, it required an install operation to the managed FortiGate.
  B. Reverting to a previous revision history will generate a new version ID and remove all other history versions.
  C. Reverting to a previous revision history will tag the device settings status as Auto-Update.
  D. It will modify device-level database
  A. To push these changes to a managed device, it required an install operation to the managed FortiGate.
  D. It will modify device-level database