Fortinet Fortinet Certifications NSE5_FMG-7.0 Questions & Answers

• Question 31:

  An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash. How can the administrator unlock the ADOM?

  A. Restore the configuration from a previous backup.

  B. Log in as Super_User in order to unlock the ADOM.

  C. Log in using the same administrator account to unlock the ADOM.

  D. Delete the previous admin session manually through the FortiManager GUI or CLI.

  Correct Answer: D

• Question 32:

  Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

  A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration

  B. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

  C. The Security Fabric settings are part of the device level settings

  D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

  Correct Answer: CD

• Question 33:

  What does a policy package status of Conflict indicate?

  A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.

  B. The policy package does not have a FortiGate as the installation target.

  C. The policy package configuration has been changed on both FortiManager and the managed device independently.

  D. The policy configuration has never been imported after a device was registered on FortiManager.

  Correct Answer: C

• Question 34:

  Refer to the exhibit.

  

  An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

  Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

  A. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.

  B. The administrator profile does not have full access privileges like the Super_User profile.

  C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.

  D. FortiAnalyzer features are not enabled on FortiManager.

  Correct Answer: BD

• Question 35:

  Which two statements regarding device management on FortiManager are true? (Choose two.)

  A. FortiGate devices in HA cluster devices are counted as a single device.

  B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

  C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

  D. The maximum number of managed devices for each ADOM is 500.

  Correct Answer: AC

• Question 36:

  What will be the result of reverting to a previous revision version in the revision history?

  A. It will install configuration changes to managed device automatically

  B. It will tag the device settings status as Auto-Update

  C. It will generate a new version ID and remove all other revision history versions

  D. It will modify the device-level database

  Correct Answer: D

• Question 37:

  Refer to the exhibit.

  

  An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes. What is the purpose of this command?

  A. It allows FortiGate to unset central management settings.

  B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.

  C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

  D. It allows FortiGate to reboot and restore a previously working firmware image.

  Correct Answer: B

  Reference: https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communicationsprotocol-guide/141304/fgfm-recovery-logic

• Question 38:

  An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate. In which database will the configuration be saved?

  A. Device-level database

  B. Revision history database

  C. ADOM-level database

  D. Configuration-level database

  Correct Answer: C

  https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942

• Question 39:

  View the following exhibit: Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

  

  A. You must install these changes using Install Wizard

  B. FortiGate will auto-update the FortiManager's device-level database.

  C. FortiManager will create a new revision history.

  D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

  Correct Answer: BC

• Question 40:

  Refer to the exhibit.

  

  An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.

  When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

  A. 192.168.0.1/24

  B. 10.200.1.0/24

  C. It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

  D. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

  Correct Answer: B

  FortiManager_6.4_Study_Guide-Online ?page 209

  In the example, the dynamic address object LocalLan refers to the internal network address of the managed firewalls. The object has a default value of 192.168.1.0/24. The mapping rules are defined per device. For Remote-FortiGate, the address object LocalLan referes to 10.10.11.0/24. The devices in the ADOM that do not have dynamic mapping for LocalLan have a default value of 192.168.1.0/2.