Fortinet Fortinet Certifications NSE5_FMG-6.2 Questions & Answers

• Question 31:

  View the following exhibit:

  

  How will FortiManager try to get updates for antivirus and IPS?

  A. From the list of configured override servers with ability to fall back to public FDN servers

  B. From the configured override server list only

  C. From the default server fdsl.fortinet.com

  D. From public FDNI server with highest index number only

  Correct Answer: C

• Question 32:

  View the following exhibit.

  

  Which one of the following statements is true regarding the object named ALL?

  A. FortiManager updated the object ALL using FortiGate's value in its database

  B. FortiManager updated the object ALL using FortiManager's value in its database

  C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

  D. FortiManager installed the object ALL with the updated value.

  Correct Answer: A

• Question 33:

  An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

  A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

  B. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

  C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

  D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

  Correct Answer: D

• Question 34:

  What does the diagnose dvm check-integrity command do? (Choose two.)

  A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

  B. Verifies and corrects unregistered, registered, and deleted device states

  C. Verifies and corrects database schemas in all object tables

  D. Verifies and corrects duplicate VDOM entries

  Correct Answer: BD

  6.2 Study Guide page 305 verify and correct parts of the device manager databases, including:

  1.

  inconsistent device-to-group and group-to-ADOM memberships

  2.

  unregistered, registered, and deleted device states

  3.

  device lock statuses

  4.

  duplicate VDOM entries

• Question 35:

  Which of the following conditions trigger FortiManager to create a new revision history? (Choose two.)

  A. When configuration revision is reverted to previous revision in the revision history

  B. When FortiManager installs device-level changes to a managed device

  C. When FortiManager is auto-updated with configuration changes made directly on a managed device

  D. When changes to device-level database is made on FortiManager

  Correct Answer: BC

• Question 36:

  An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

  A. Allows FortiManager to download IPS packages

  B. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices

  C. Allows FortiManager to run real-time debugs on the managed devices

  D. Allows FortiManager to automatically configure a default route

  Correct Answer: B

• Question 37:

  Refer to the exhibit.

  

  You are using the Quick Install option to install configuration changes on the managed FortiGate.

  Which two statements correctly describe the result? (Choose two.)

  A. It will not create a new revision in the revision history

  B. It installs device-level changes to FortiGate without launching the Install Wizard

  C. It cannot be canceled once initiated and changes will be installed on the managed device

  D. It provides the option to preview configuration changes prior to installing them

  Correct Answer: BC

• Question 38:

  Refer to the exhibits. Exhibit one.

  

  Exhibit two.

  

  An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.

  What can be the main reason for these unset commands?

  A. The DNS addresses in the default system settings are the same as the Training system template

  B. The Training system template has other default settings

  C. The ADOM is locked by another administrator

  D. The Training system template does not have assigned devices

  Correct Answer: B

• Question 39:

  An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate.

  In which database will the configuration be saved?

  A. Device-level database

  B. Revision history database

  C. ADOM-level database

  D. Configuration-level database

  Correct Answer: C

  https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942

• Question 40:

  Refer to the exhibit.

  

  An administrator has created a firewall address object which is used in multiple policy packages for multiple FortiGate devices in an ADOM.

  When the installation operation is performed, which IP/Netmask will be installed on managed devices for this firewall address object?

  A. 192.168.0.1/24 on Remote-FortiGate

  B. 10.200.1.0/24 on Remote-FortiGate

  C. If no dynamic mapping is defined for other FortiGate devices, the object will not be installed

  D. The FortiManager administrator can choose the value for the firewall address object in the Install Wizard for Remote-FortiGate

  Correct Answer: B