Fortinet NSE5_FMG-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-6.4 Online Questions & Answers

• Question 1:

  An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session. What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

  

  A. Trainer is not a part of workflow approval group
  B. Trainer does not have full rights over this ADOM
  C. Trainer must close Student's workflow session before approving the request
  D. Student, who submitted the workflow session, must first self-approve the request
  A. Trainer is not a part of workflow approval group

  ---

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/0800_ADOMs/1800_Workflow/0600_Workflow%20sessions.htm

• Question 2:

  Which two statements regarding device management on FortiManager are true? (Choose two.)

  A. FortiGate devices in HA cluster devices are counted as a single device.
  B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
  C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
  D. The maximum number of managed devices for each ADOM is 500.
  A. FortiGate devices in HA cluster devices are counted as a single device.
  C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

• Question 3:

  An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?

  A. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
  B. You must specify a gateway address when you create a default static route
  C. Remove all the interface references such as routes or policies
  D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
  D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

• Question 4:

  View the following exhibit.

  

  Which one of the following statements is true regarding the object named ALL?

  A. FortiManager updated the object ALL using FortiGate's value in its database
  B. FortiManager updated the object ALL using FortiManager's value in its database
  C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
  D. FortiManager installed the object ALL with the updated value.
  A. FortiManager updated the object ALL using FortiGate's value in its database

• Question 5:

  What will happen if FortiAnalyzer features are enabled on FortiManager?

  A. FortiManager will reboot
  B. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
  C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
  D. FortiManager can be used only as a logging device.
  A. FortiManager will reboot

  ---

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1800_FAZ%20Features/0200_Enable%20FAZ%20Features.htm

• Question 6:

  An administrator is replacing a device on FortiManager by running the following command:

  execute device replace sn .

  What device name and serial number must the administrator use?

  A. Device name and serial number of the original device.
  B. Device name and serial number of the replacement device.
  C. Device name of the replacement device and serial number of the original device.
  D. Device name of the original device and serial number of the replacement device.
  D. Device name of the original device and serial number of the replacement device.

• Question 7:

  An administrator run the reload failure command: diagnose test deploymanager reload config on FortiManager. What does this command do?

  A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
  B. It installs the latest configuration on the specified FortiGate and update the revision history database.
  C. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
  D. It installs the provisioning template configuration on the specified FortiGate.
  A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.

  ---

  Reference: https://community.fortinet.com/t5/FortiManager/Technical-Note-Retrieve-configuration-file-using-CLI-from-a/ta-p/191000?externalID=FD36387

• Question 8:

  An administrator would like to create an SD-WAN using central management in the Training ADOM. To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

  A. Specify a gateway address when you create a default SD-WAN static route
  B. Enable SD-WAN central management in the Training ADOM
  C. Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings
  D. Remove all the interface references such as routes or policies that will be a part of SD- WAN member interfaces
  B. Enable SD-WAN central management in the Training ADOM
  D. Remove all the interface references such as routes or policies that will be a part of SD- WAN member interfaces

  ---

  Reference: https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/676493/removing-existing-configuration-references-to-interfaces

• Question 9:

  Refer to the exhibit.

  

  Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

  A. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.
  B. It disables concurrent read-write access to an ADOM.
  C. It allows the same administrator to lock more than one ADOM at the same time.
  D. It is used to validate administrator login attempts through external servers.
  B. It disables concurrent read-write access to an ADOM.
  C. It allows the same administrator to lock more than one ADOM at the same time.

  ---

  Reference: https://docs.fortinet.com/document/fortimanager/6.0.4/administration-guide/86456/concurrentadom-access

• Question 10:

  Refer to the exhibit.

  

  An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

  Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

  A. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
  B. The administrator profile does not have full access privileges like the Super_User profile.
  C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
  D. FortiAnalyzer features are not enabled on FortiManager.
  B. The administrator profile does not have full access privileges like the Super_User profile.
  D. FortiAnalyzer features are not enabled on FortiManager.