VCEdump

NSE5_FMG-6.4 Fortinet NSE 5 - FortiManager 6.4

PDF question preview Back to product

Free preview

9 sample questions

The complete product contains 59 questions.

Question formats

Single choice7

Multiple choice2

Compare study plans

Fortinet · NSE5_FMG-6.4

NSE5_FMG-6.4 questions and answers

Review the question wording, option layout, and available explanations before choosing a study plan.

Question 1

Single choice

An administrator has added all the devices in a Security Fabric group to FortiManager.

How does the administrator identify the root FortiGate?

A
By a dollar symbol ($) at the end of the device name
B
By an at symbol (@) at the end of the device name
C
By a QUESTION NO: mark(?) at the end of the device name
D
By an Asterisk (*) at the end of the device name

Reveal answer details Close answer details

Correct answerD

Question 2

Single choice

View the following exhibit.

What is the purpose of setting ADOM Mode to Advanced?

A
The setting allows automatic updates to the policy package configuration for a managed device
B
The setting enables the ADOMs feature on FortiManager
C
This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
D
The setting disables concurrent ADOM access and adds ADOM locking

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/66530/adom-device-modes

Question 3

Multiple choice

Refer to the exhibit.

Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

A
It supports the FortiManager script feature
B
It allows making configuration changes for managed devices on FortiManager panes
C
FortiManager automatically installs the configuration difference in revisions on the managed FortiGate
D
You cannot assign the same ADOM to multiple administrators

Reveal answer details Close answer details

Correct answersA, B

Explanation

"FortiGate units in the ADOM will query their own configuration every 5 seconds. If there has been a configuration change, the FortiGate unit will send a diff revision on the change to the FortiManager using the FGFM protocol."

Question 4

Single choice

An administrator wants to delete an address object that is currently referenced in a firewall policy.

What can the administrator expect to happen?

A
FortiManager will not allow the administrator to delete a referenced address object
B
FortiManager will disable the status of the referenced firewall policy
C
FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
D
FortiManager will replace the deleted address object with all address object in the referenced firewall policy

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/1200_Managing%20objects/0800_Remove%20an%20object.htm

Question 5

Single choice

An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.

How should the Workspace mode be configured on FortiManager?

A
Set to workflow and use the ADOM locking feature
B
Set to read/write and use the policy locking feature
C
Set to normal and use the policy locking feature
D
Set to disable and use the policy locking feature

Reveal answer details Close answer details

Correct answerA

Explanation

References:
https://help.fortinet.com/fmgr/50hlp/52/5-2-0/FMG_520_Online_Help/200_What's-New.03.03.html

Question 6

Single choice

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package.

When the install operation is performed, which IP Netmask will be installed on the Local- FortiGate, for the Training firewall address object?

A
10.0.1.0/24
B
It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
C
192.168.0.1/24
D
Local-FortiGate will automatically choose an IP Network based on its network interface settings.

Reveal answer details Close answer details

Correct answerA

Question 7

Single choice

What is the purpose of ADOM revisions?

A
To create System Checkpoints for the FortiManager configuration.
B
To save the current state of the whole ADOM.
C
To save the current state of all policy packages and objects for an ADOM.
D
To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

Reveal answer details Close answer details

Correct answerC

Explanation

Fortimanager 6.4 Study guide page 198

Question 8

Multiple choice

Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)

A
Backs up all devices and the FortiGuard database.
B
Does not back up firmware images saved on FortiManager
C
Supports FTP, SCP, and SFTP
D
Can be configured from the CLI and GUI

Reveal answer details Close answer details

Correct answersB, C

Question 9

Single choice

An administrator would like to create an SD-WAN using central management.

What steps does the administrator need to perform to create an SD-WAN using central management?

A
First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
B
You must specify a gateway address when you create a default static route
C
Remove all the interface references such as routes or policies
D
Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

Reveal answer details Close answer details

Correct answerD