Fortinet Fortinet Certifications NSE5_FMG-5.4 Questions & Answers

• Question 41:

  In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

  A. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device.

  B. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

  C. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

  D. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

  Correct Answer: C

• Question 42:

  In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration request to FortiManager from a remote FortiGate. Which one of the following statements is true?

  A. The FortiGate will be automatically added to the Training ADOM.

  B. By default, the unregistered FortiGate will appear in the root ADOM.

  C. The FortiManager administrator must add the unregistered device manually to the Training ADOM using the Add Device wizard.

  D. The FortiGate will be added automatically to the default ADOM named FortiGate.

  Correct Answer: B

• Question 43:

  Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

  A. Managed gateways are devices managed by FortiManager in the same ADOM

  B. External gateways are third-party VPN gateway devices only

  C. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN

  D. Managed devices in other ADOMs must be treated as external gateways

  Correct Answer: AD

• Question 44:

  An administrator's PC crashed before the administrator could submit a workflow session for approval. After the PC restarted, the administrator noticed that the ADOM was locked from the session before the crash. How can the administrator unlock the ADOM?

  A. The administrator must log in as Super_User in order to unlock the ADOM.

  B. The administrator must restore the configuration from a previous backup.

  C. Delete the previous admin session manually through the FortiManager's GUI or CLI.

  D. The administrator must log in using the same administrator account to unlock the ADOM

  Correct Answer: D

• Question 45:

  An administrator removed one of the secondary devices from the FortiManager HA cluster. What change will be pushed by the primary FortiManager device?

  A. FortiManager will remove the secondary device's IP address and serial number immediately from the central management configuration of managed devices.

  B. FortiManager will remove the secondary device's serial number immediately from the central management configuration of managed devices.

  C. FortiManager will remove the secondary device's IP address immediately from the central management configuration of managed devices.

  D. FortiManager will remove the secondary device's IP address from the server-list configuration central management configuration of managed devices.

  Correct Answer: A

• Question 46:

  Which of the following are included in the FortiManager backup? (Choose two.)

  A. Global database

  B. FortiGuard database

  C. Logs

  D. All devices

  Correct Answer: AD

• Question 47:

  Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

  A. To push these changes to a managed device, it required an install operation to the managed FortiGate.

  B. Reverting to a previous revision history will generate a new version ID and remove all other history versions.

  C. Reverting to a previous revision history will tag the device settings status as Auto-Update.

  D. It will modify device-level database

  Correct Answer: AD

• Question 48:

  An administrator has assigned a global policy package to custom ADOM1. Then the administrator created a new policy package, Fortinet, in the custom ADOM1. Which one of the following statements is true regarding global policy package assignment to the newly-created policy package Fortinet?

  A. When a new policy package is created, you need to reapply the global policy package to the ADOM.

  B. When a new policy package is created, it automatically assigns the global policies to the new package.

  C. When a new policy package is created, you need to assign the global policy package from the global ADOM.

  D. When a new policy package is created, you can select the option to assign the global policies to the new package.

  Correct Answer: B

• Question 49:

  An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

  A. Allows FortiManager to run real-time debugs on the managed devices.

  B. Allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.

  C. Allows FortiManager to automatically configure a default route.

  D. Allows FortiManager to download IPS packages.

  Correct Answer: B

• Question 50:

  What is the purpose of the ADOM revisions?

  A. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision.

  B. To create System Checkpoints for the FortiManager configuration.

  C. To save the current state of all policy packages and objects for an ADOM.

  D. To save the current state of the whole ADOM.

  Correct Answer: C