NSE5_FMG-6.0 Online Practice Questions and Answers

What does the diagnose dvm check-integrity command do? (Choose two.)

A. Internally upgrades existing ADOMs to the same ADOM version in order to clean up and correct the ADOM syntax

B. Verifies and corrects unregistered, registered, and deleted device states

C. Verifies and corrects database schemas in all object tables

D. Verifies and corrects duplicate VDOM entries

View the following exhibit:

How will FortiManager try to get updates for antivirus and IPS?

A. From the list of configured override servers with ability to fall back to public FDN servers

B. From the configured override server list only

C. From the default server fdsl.fortinet.com

D. From public FDNI server with highest index number only

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

A. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

B. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

C. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

D. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Which of the following items does an FGFM keepalive message include? (Choose two.)

A. FortiGate uptime

B. FortiGate license information

C. FortiGate IPS version

D. FortiGate configuration checksum

Refer to the following exhibit:

Which of the following statements are true based on this configuration? (Choose two.)

A. The same administrator can lock more than one ADOM at the same time

B. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out

C. Unlocking an ADOM will submit configuration changes automatically to the approval administrator

D. Unlocking an ADOM will install configuration automatically on managed devices

Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)

A. Backs up all devices and the FortiGuard database.

B. Does not back up firmware images saved on FortiManager

C. Supports FTP, SCP, and SFTP

D. Can be configured from the CLI and GUI

What does a policy package status of Modified indicate?

A. FortiManager is unable to determine the policy package status

B. The policy package was never imported after a device was registered on FortiManager

C. Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

D. Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

View the following exhibit.

Which of the following statements are true if FortiManager and FortiGate are behind the NAT devices? (Choose two.)

A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

B. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

C. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

D. If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the

following statements are true? (Choose two.)

A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device

B. Will not create new revision in the revision history

C. Installs device-level changes to FortiGate without launching the Install Wizard

D. Provides the option to preview configuration changes prior to installing them

An administrator wants to delete an address object that is currently referenced in a firewall policy. Which one of the following statements is true?

A. FortiManager will not allow the administrator to delete a referenced address object

B. FortiManager will disable the status of the referenced firewall policy

C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy