Fortinet NSE5_FMG-6.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-6.2 Online Questions & Answers

• Question 31:

  An administrator is replacing a device on FortiManager by running the following command:

  execute device replace sn .

  What device name and serial number must the administrator use?

  A. Device name and serial number of the original device.
  B. Device name and serial number of the replacement device.
  C. Device name of the replacement device and serial number of the original device.
  D. Device name of the original device and serial number of the replacement device.
  D. Device name of the original device and serial number of the replacement device.

• Question 32:

  Refer to the exhibit.

  

  An administrator is importing a new device to FortiManager and has selected the options shown in the exhibit.

  What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

  A. The unused objects that are not tied to the firewall policies will be installed on FortiGate
  B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
  C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
  D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database
  C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

• Question 33:

  You are moving managed FortiGate devices from one ADOM to a new ADOM. Which statement correctly describes the expected result?

  A. Any pending device settings will be installed automatically
  B. Any unused objects from a previous ADOM are moved to the new ADOM automatically
  C. The shared policy package will not be moved to the new ADOM
  D. Policy packages will be imported into the new ADOM automaticallyD
  C. The shared policy package will not be moved to the new ADOM

• Question 34:

  Refer to the exhibit.

  

  An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

  Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

  A. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
  B. The administrator profile does not have full access privileges like the Super_User profile.
  C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
  D. FortiAnalyzer features are not enabled on FortiManager.
  B. The administrator profile does not have full access privileges like the Super_User profile.
  D. FortiAnalyzer features are not enabled on FortiManager.

• Question 35:

  Refer to the exhibit.

  

  Which statement about the object named ALL is true?

  A. FortiManager updated the object ALL using the FortiGate value in its database.
  B. FortiManager installed the object ALL with the updated value.
  C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
  D. FortiManager updated the object ALL using the FortiManager value in its database.
  A. FortiManager updated the object ALL using the FortiGate value in its database.

• Question 36:

  An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?

  A. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
  B. You must specify a gateway address when you create a default static route
  C. Remove all the interface references such as routes or policies
  D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
  D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

• Question 37:

  Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)

  A. Backs up all devices and the FortiGuard database.
  B. Does not back up firmware images saved on FortiManager
  C. Supports FTP, SCP, and SFTP
  D. Can be configured from the CLI and GUI
  B. Does not back up firmware images saved on FortiManager
  C. Supports FTP, SCP, and SFTP

• Question 38:

  An administrator run the reload failure command: diagnose test deploymanager reload config on FortiManager. What does this command do?

  A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
  B. It installs the latest configuration on the specified FortiGate and update the revision history database.
  C. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
  D. It installs the provisioning template configuration on the specified FortiGate.
  A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.

• Question 39:

  An administrator has added all the devices in a Security Fabric group to FortiManager. How does the administrator identify the root FortiGate?

  A. By a dollar symbol ($) at the end of the device name
  B. By an at symbol (@) at the end of the device name
  C. By a
  D. By an Asterisk (*) at the end of the device name
  D. By an Asterisk (*) at the end of the device name

• Question 40:

  What does the diagnose dvm check-integrity command do? (Choose two.)

  A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax
  B. Verifies and corrects unregistered, registered, and deleted device states
  C. Verifies and corrects database schemas in all object tables
  D. Verifies and corrects duplicate VDOM entries
  B. Verifies and corrects unregistered, registered, and deleted device states
  D. Verifies and corrects duplicate VDOM entries