NSE5_FMG-5.4 Online Practice Questions and Answers

View the following exhibit: How will FortiManager try to get updates for antivirus and IPS?

A. From the list of configured override servers with ability to fall back to public FDN servers

B. From the configured override server list only.

C. From the default server fds1.fortinet.com.

D. From public FDNI servers with highest index number only.

View the following exhibit:

An administrator logs in to the FortiManager GUI and sees these panes. Which of the following can be the reason the FortiAnalyzer feature panes don't appear? (Choose two.)

A. The administrator IP address is not a part of the trusted hosts configured on FortiManager's interfaces.

B. FortiAnalyzer features are not enabled on FortiManager.

C. The administrator logged in using unsecure protocol HTTP, so the view is restricted.

D. The administrator profile does not have full access privileges like the Super_User profile

View the following exhibit:

Which of the following statements are true regarding when ADOM is set as Normal mode on the FortiManager? (Choose two.)

A. Cannot assign the same ADOM to multiple administrators

B. Supports FortiManager script feature

C. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

D. Allows making configuration changes for managed devices on FortiManager panes

When installation is performed from the FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

B. FortiGate will reject the CLI commands that will cause the tunnel to go down.

C. FortiManager will revert and install a previous configuration revision on the managed FortiGate.

D. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

Which of the following statements are true regarding VPN Manager? (Choose three.)

A. VPN Manager must be enabled on a per ADOM basis.

B. VPN Manager automatically adds newly-registered devices to a VPN community.

C. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

D. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

E. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

An administrator is unable to log in to FortiManager. Which one of the following troubleshooting step should you take to resolve the issue?

A. Make sure FortiManager Access is enabled in the administrator profile.

B. Make sure ADOMs are enabled and the administrator has access to the Global ADOM.

C. Make sure Offline Mode is disabled.

D. Make sure the administrator IP address is part of the trusted hosts.

Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

A. To push these changes to a managed device, it required an install operation to the managed FortiGate.

B. Reverting to a previous revision history will generate a new version ID and remove all other history versions.

C. Reverting to a previous revision history will tag the device settings status as Auto-Update.

D. It will modify device-level database

An administrator configured a new firewall policy on FortiManager and has yet pushed to the managed FortiGate. In which database will the configuration be saved?

A. Configuration-level database

B. Device-level database

C. ADOM-level database

D. Revision history database

Which of the following statements are true regarding device management on FortiManager? (Choose two.)

A. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

B. The maximum number of managed devices for each ADOM is 500.

C. FortiGate devices in HA cluster devices are counted as a single device.

D. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

What does the diagnose dvm check-integrity command do? (Choose two.)

A. Verifies and corrects database schemas in all object tables.

B. Internally upgrades existing ADOMs to the same ADOM version in order to clean up and correct the ADOM syntax.

C. Verifies and corrects duplicate VDOM entries.

D. Verifies and corrects unregistered, registered, and deleted device states.