NSE5_FMG-6.0 Online Practice Questions and Answers

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

B. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

A. port2

B. virtual-wan-link

C. port1

D. auto-discovery

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

A. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

B. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

C. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

D. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

View the following exhibit.

Based on the configuration setting, which one of the following statements is true?

A. The setting allows automatic updates to the policy package configuration for a managed device

B. The setting enables the ADOMs feature on FortiManager

C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

D. The setting disables concurrent ADOM access and adds ADOM locking

An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?

A. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route

B. You must specify a gateway address when you create a default static route

C. Remove all the interface references such as routes or policies

D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SD-WAN firewall policies.

Which of the following statements are true regarding SD-WAN Central Management? (Choose three.)

A. SD-WAN must be enabled on per-ADOM basis

B. SD-WAN settings can be installed on multiple FortiGate devices at the same time

C. You can create multiple SD-WAN interfaces per VDOM

D. When you configure an SD-WAN, you must specify at least two member interfaces.

E. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

View the following exhibit: Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)

A. You must install these changes using Install Wizard

B. FortiGate will auto-update the FortiManager's device-level database.

C. FortiManager will create a new revision history.

D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

What does a policy package status of Modified indicate?

A. FortiManager is unable to determine the policy package status

B. The policy package was never imported after a device was registered on FortiManager

C. Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

D. Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

View the following exhibit.

Which statement is true regarding this failed installation log?

A. Policy ID 2 is installed without a source address

B. Policy ID 2 will not be installed

C. Policy ID 2 is installed in disabled state

D. Policy ID 2 is installed without a source device

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. 10.0.1.0/24

B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

C. 192.168.0.1/24

D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.