Fortinet Fortinet Other Certification NSE5_FMG-6.0 Questions & Answers

• Question 1:

  View the following exhibit.

  

  An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

  A. 10.0.1.0/24

  B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

  C. 192.168.0.1/24

  D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.

  Correct Answer: A

• Question 2:

  View the following exhibit.

  

  Which statement is true regarding this failed installation log?

  A. Policy ID 2 is installed without a source address

  B. Policy ID 2 will not be installed

  C. Policy ID 2 is installed in disabled state

  D. Policy ID 2 is installed without a source device

  Correct Answer: D

• Question 3:

  View the following exhibit.

  When using Install Config option to install configuration changes to managed FortiGate, which of the

  following statements are true? (Choose two.)

  

  A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device

  B. Will not create new revision in the revision history

  C. Installs device-level changes to FortiGate without launching the Install Wizard

  D. Provides the option to preview configuration changes prior to installing them

  Correct Answer: AC

• Question 4:

  An administrator is unable to log in to FortiManager. Which one of the following troubleshooting step should you take to resolve the issue?

  A. Make sure FortiManager Access is enabled in the administrator profile

  B. Make sure Offline Mode is disabled

  C. Make sure the administrator IP address is part of the trusted hosts.

  D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM

  Correct Answer: C

• Question 5:

  An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the approving a workflow session?

  

  A. Trainer is not a part of workflow approval group

  B. Trainer does not have full rights over this ADOM

  C. Trainer must close Student's workflow session before approving the request

  D. Student, who submitted the workflow session, must first self-approve the request

  Correct Answer: A

• Question 6:

  View the following exhibit.

  

  An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

  A. The unused objects that are not tied to the firewall policies will be installed on FortiGate

  B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

  C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

  D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database

  Correct Answer: C

• Question 7:

  An administrator wants to delete an address object that is currently referenced in a firewall policy. Which one of the following statements is true?

  A. FortiManager will not allow the administrator to delete a referenced address object

  B. FortiManager will disable the status of the referenced firewall policy

  C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

  D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy

  Correct Answer: C

• Question 8:

  What does a policy package status of Modified indicate?

  A. FortiManager is unable to determine the policy package status

  B. The policy package was never imported after a device was registered on FortiManager

  C. Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

  D. Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

  Correct Answer: D

• Question 9:

  View the following exhibit.

  

  Which of the following statements are true if FortiManager and FortiGate are behind the NAT devices? (Choose two.)

  A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

  B. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

  C. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

  D. If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

  Correct Answer: AD

• Question 10:

  What is the purpose of the Policy Check feature on FortiManager?

  A. To find and provide recommendation to combine multiple separate policy packages into one common policy package

  B. To find and merge duplicate policies in the policy package

  C. To find and provide recommendation for optimizing policies in a policy package

  D. To find and delete disabled firewall policies in the policy package

  Correct Answer: B