NSE5_FMG-6.0 Online Practice Questions and Answers

View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

A. FortiManager updated the object ALL using FortiGate's value in its database

B. FortiManager updated the object ALL using FortiManager's value in its database

C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this

managed FortiGate.

D. FortiManager installed the object ALL with the updated value.

View the following exhibit:

How will FortiManager try to get updates for antivirus and IPS?

A. From the list of configured override servers with ability to fall back to public FDN servers

B. From the configured override server list only

C. From the default server fdsl.fortinet.com

D. From public FDNI server with highest index number only

View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

View the following exhibit.

Based on the configuration setting, which one of the following statements is true?

A. The setting allows automatic updates to the policy package configuration for a managed device

B. The setting enables the ADOMs feature on FortiManager

C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

D. The setting disables concurrent ADOM access and adds ADOM locking

Which of the following statements are true regarding SD-WAN Central Management? (Choose three.)

A. SD-WAN must be enabled on per-ADOM basis

B. SD-WAN settings can be installed on multiple FortiGate devices at the same time

C. You can create multiple SD-WAN interfaces per VDOM

D. When you configure an SD-WAN, you must specify at least two member interfaces.

E. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

What are the factory default settings on FortiManager? (Choose three.)

A. Username is admin

B. Password is fortinet

C. FortiAnalyzer features are disabled

D. Reports and Event Monitor panes are enabled

E. port1 interface IP address is 192.168.1.99/24

View the following exhibit.

Which statement is true regarding this failed installation log?

A. Policy ID 2 is installed without a source address

B. Policy ID 2 will not be installed

C. Policy ID 2 is installed in disabled state

D. Policy ID 2 is installed without a source device

View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the

following statements are true? (Choose two.)

A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device

B. Will not create new revision in the revision history

C. Installs device-level changes to FortiGate without launching the Install Wizard

D. Provides the option to preview configuration changes prior to installing them

An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the approving a workflow session?

A. Trainer is not a part of workflow approval group

B. Trainer does not have full rights over this ADOM

C. Trainer must close Student's workflow session before approving the request

D. Student, who submitted the workflow session, must first self-approve the request

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. 10.0.1.0/24

B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

C. 192.168.0.1/24

D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.