NSE5_FMG-6.4 Online Practice Questions and Answers

An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.

How should the Workspace mode be configured on FortiManager?

A. Set to workflow and use the ADOM locking feature

B. Set to read/write and use the policy locking feature

C. Set to normal and use the policy locking feature

D. Set to disable and use the policy locking feature

An administrator wants to delete an address object that is currently referenced in a firewall policy.

What can the administrator expect to happen?

A. FortiManager will not allow the administrator to delete a referenced address object

B. FortiManager will disable the status of the referenced firewall policy

C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy

An administrator run the reload failure command: diagnose test deploymanager reload config on FortiManager. What does this command do?

A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.

B. It installs the latest configuration on the specified FortiGate and update the revision history database.

C. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.

D. It installs the provisioning template configuration on the specified FortiGate.

View the following exhibit:

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

A. You must install these changes using Install Wizard

B. FortiGate will auto-update the FortiManager's device-level database.

C. FortiManager will create a new revision history.

D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.

What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

A. Trainer is not a part of workflow approval group

B. Trainer does not have full rights over this ADOM

C. Trainer must close Student's workflow session before approving the request

D. Student, who submitted the workflow session, must first self-approve the request

View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

Which two statements regarding device management on FortiManager are true? (Choose two.)

A. FortiGate devices in HA cluster devices are counted as a single device.

B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

D. The maximum number of managed devices for each ADOM is 500.

Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

A. It allows two or more administrators to make configuration changes at the same time, in the same

ADOM.

B. It disables concurrent read-write access to an ADOM.

C. It allows the same administrator to lock more than one ADOM at the same time.

D. It is used to validate administrator login attempts through external servers.

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration

B. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

C. The Security Fabric settings are part of the device level settings

D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)

A. Backs up all devices and the FortiGuard database.

B. Does not back up firmware images saved on FortiManager

C. Supports FTP, SCP, and SFTP

D. Can be configured from the CLI and GUI