Fortinet NSE5_FMG-6.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-6.2 Online Questions & Answers

• Question 21:

  As a result of enabling FortiAnalyzer features on FortiManager, which of the following statements is true?

  A. FortiManager will reboot
  B. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
  C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
  D. FortiManager can be used only as a logging device.
  A. FortiManager will reboot

• Question 22:

  View the following exhibit, which shows the Download Import Report:

  

  Why it is failing to import firewall policy ID 2?

  A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate
  B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager
  C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager
  D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
  A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

• Question 23:

  What is the purpose of the Policy Check feature on FortiManager?

  A. To find and provide recommendation to combine multiple separate policy packages into one common policy package
  B. To find and merge duplicate policies in the policy package
  C. To find and provide recommendation for optimizing policies in a policy package
  D. To find and delete disabled firewall policies in the policy package
  C. To find and provide recommendation for optimizing policies in a policy package

• Question 24:

  Which of the following statements are true regarding SD-WAN Central Management? (Choose three.)

  A. SD-WAN must be enabled on per-ADOM basis
  B. SD-WAN settings can be installed on multiple FortiGate devices at the same time
  C. You can create multiple SD-WAN interfaces per VDOM
  D. When you configure an SD-WAN, you must specify at least two member interfaces.
  E. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.
  A. SD-WAN must be enabled on per-ADOM basis
  B. SD-WAN settings can be installed on multiple FortiGate devices at the same time
  D. When you configure an SD-WAN, you must specify at least two member interfaces.

• Question 25:

  An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1. Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

  A. When a new policy package is created, it automatically assigns the global policies to the new package.
  B. When a new policy package is created, you need to assign the global policy package from the global ADOM.
  C. When a new policy package is created, you need to reapply the global policy package to the ADOM.
  D. When a new policy package is created, you can select the option to assign the global policies to the new package.
  A. When a new policy package is created, it automatically assigns the global policies to the new package.

• Question 26:

  Which of the following items does an FGFM keepalive message include? (Choose two.)

  A. FortiGate uptime
  B. FortiGate license information
  C. FortiGate IPS version
  D. FortiGate configuration checksum
  C. FortiGate IPS version
  D. FortiGate configuration checksum

• Question 27:

  View the following exhibit.

  

  Based on the configuration setting, which one of the following statements is true?

  A. The setting allows automatic updates to the policy package configuration for a managed device
  B. The setting enables the ADOMs feature on FortiManager
  C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
  D. The setting disables concurrent ADOM access and adds ADOM locking
  C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

• Question 28:

  Refer to the exhibit.

  

  You are using the Quick Install option to install configuration changes on the managed FortiGate. Which two statements correctly describe the result? (Choose two.)

  A. It will not create a new revision in the revision history
  B. It installs device-level changes to FortiGate without launching the Install Wizard
  C. It cannot be canceled once initiated and changes will be installed on the managed device
  D. It provides the option to preview configuration changes prior to installing them
  B. It installs device-level changes to FortiGate without launching the Install Wizard
  C. It cannot be canceled once initiated and changes will be installed on the managed device

• Question 29:

  An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators. How should the Workspace mode be configured on FortiManager?

  A. Set to workflow and use the ADOM locking feature
  B. Set to read/write and use the policy locking feature
  C. Set to normal and use the policy locking feature
  D. Set to disable and use the policy locking feature
  A. Set to workflow and use the ADOM locking feature

• Question 30:

  What configuration setting for FortiGate is part of a device-level database on FortiManager?

  A. VIP and IP Pools
  B. Firewall policies
  C. Security profiles
  D. Routing
  D. Routing