Fortinet Fortinet Certifications NSE5_FMG-5.4 Questions & Answers

• Question 11:

  View the following exhibit: How will FortiManager try to get updates for antivirus and IPS?

  

  A. From the list of configured override servers with ability to fall back to public FDN servers

  B. From the configured override server list only.

  C. From the default server fds1.fortinet.com.

  D. From public FDNI servers with highest index number only.

  Correct Answer: A

• Question 12:

  View the following exhibit:

  

  Which one of the following statements is true regarding installation targets in the Install On column?

  A. Policy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets.

  B. Policy seq.# 3 will be installed on the Trainer[NAT] VDOM only.

  C. Policy seq.# 3 will not be installed on any managed device.

  D. The Install On column value represents successful installations on the managed devices.

  Correct Answer: B

• Question 13:

  Refer to the following exhibit:

  

  Which of the following statements are true based on this configuration? (Choose two.)

  A. Unlocking an ADOM will submit configuration changes automatically to the approval administrator.

  B. Unlocking an ADOM will install configuration changes automatically on managed devices.

  C. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.

  D. The same administrator can lock more than one ADOM at the same time.

  Correct Answer: CD

• Question 14:

  View the following exhibit:

  

  An administrator is importing a new device to FortiManager and has selected the shown options.

  What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

  A. The unused objects that are not tied to the firewall policies will be installed on FortiGate.

  B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate.

  C. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database.

  D. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted.

  Correct Answer: A

• Question 15:

  View the following exhibit:

  

  An administrator logs in to the FortiManager GUI and sees these panes. Which of the following can be the reason the FortiAnalyzer feature panes don't appear? (Choose two.)

  A. The administrator IP address is not a part of the trusted hosts configured on FortiManager's interfaces.

  B. FortiAnalyzer features are not enabled on FortiManager.

  C. The administrator logged in using unsecure protocol HTTP, so the view is restricted.

  D. The administrator profile does not have full access privileges like the Super_User profile

  Correct Answer: AB

• Question 16:

  View the following exhibit:

  

  An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?

  A. port1 on FortiGate and WAN on FortiManager

  B. port1 on both FortiGate and FortiManager

  C. WAN zone on FortiGate and WAN zone on FortiManager

  D. WAN zone on FortiGate and WAN interface on FortiManager

  Correct Answer: A

• Question 17:

  An administrator has configured the following command on FortiManager:

  

  A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes. What is the purpose of this command?

  A. It allows FortiGate to reboot and recover the previous configuration from its configuration file.

  B. It allows FortiGate to unset central management settings.

  C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

  D. It allows FortiGate to reboot and restore a previously working firmware image.

  Correct Answer: A

• Question 18:

  View the following exhibit:

  

  An administrator has created a firewall address object which is used in multiple policy packages for multiple FortiGate devices in a ADOM. When the install operation is performed, which IP/Netmask will be installed on managed devices, for this firewall address object?

  A. 10.200.1.0/24 on Remote-FortiGate

  B. FortiManager administrator can choose the value for the firewall address object in the Install Wizard for Remote-FortiGate

  C. 192.168.0.1/24 on Remote-FortiGate

  D. If no dynamic mapping is defined for other FortiGate devices, the object will not be installed

  Correct Answer: A

• Question 19:

  View the following exhibit:

  

  Which of the following statements are true based on this configuration? (Choose two.)

  A. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

  B. It disables concurrent read-write access to an ADOM.

  C. It allows the same administrator to lock more than one ADOM at the same time.

  D. It is used to validate your administrator login attempts through external servers.

  Correct Answer: BC

• Question 20:

  View the following exhibit: Which of the following statements are true if the script is executed using Device Database option? (Choose two.)

  

  A. The Device Settings Status will be tagged as Modified

  B. Successful execution of script on Device Database will create a new revision history

  C. The script history will show successful installation of script on the remote FortiGate

  D. You must install these changes using Install Wizard to a managed device

  Correct Answer: BC