NSE5_FMG-6.2 Online Practice Questions and Answers

Refer to the exhibit.

Which two statements are true if the script is executed using the Device Database option? (Choose two.)

A. You must install these changes using the Install Wizard to a managed device

B. The successful execution of a script on the Device Database will create a new revision history

C. The script history will show successful installation of the script on the remote FortiGate

D. The Device Settings Status will be tagged as Modified

An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.

How can the administrator unlock the ADOM?

A. Restore the configuration from a previous backup.

B. Log in as Super_User in order to unlock the ADOM.

C. Log in using the same administrator account to unlock the ADOM.

D. Delete the previous admin session manually through the FortiManager GUI or CLI.

What will be the result of reverting to a previous revision version in the revision history?

A. It will install configuration changes to managed device automatically

B. It will tag the device settings status as Auto-Update

C. It will generate a new version ID and remove all other revision history versions

D. It will modify the device-level database

Refer to the exhibit.

An administrator has created a firewall address object which is used in multiple policy packages for multiple FortiGate devices in an ADOM.

When the installation operation is performed, which IP/Netmask will be installed on managed devices for this firewall address object?

A. 192.168.0.1/24 on Remote-FortiGate

B. 10.200.1.0/24 on Remote-FortiGate

C. If no dynamic mapping is defined for other FortiGate devices, the object will not be installed

D. The FortiManager administrator can choose the value for the firewall address object in the Install Wizard for Remote-FortiGate

What does the diagnose dvm check-integrity command do? (Choose two.)

A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

B. Verifies and corrects unregistered, registered, and deleted device states

C. Verifies and corrects database schemas in all object tables

D. Verifies and corrects duplicate VDOM entries

View the following exhibit:

How will FortiManager try to get updates for antivirus and IPS?

A. From the list of configured override servers with ability to fall back to public FDN servers

B. From the configured override server list only

C. From the default server fdsl.fortinet.com

D. From public FDNI server with highest index number only

What configuration setting for FortiGate is part of a device-level database on FortiManager?

A. VIP and IP Pools

B. Firewall policies

C. Security profiles

D. Routing

Refer to the following exhibit:

Which of the following statements are true based on this configuration? (Choose two.)

A. The same administrator can lock more than one ADOM at the same time

B. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out

C. Unlocking an ADOM will submit configuration changes automatically to the approval administrator

D. Unlocking an ADOM will install configuration automatically on managed devices

View the following exhibit: Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)

A. You must install these changes using Install Wizard

B. FortiGate will auto-update the FortiManager's device-level database.

C. FortiManager will create a new revision history.

D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.

Which troubleshooting step should you take to resolve the issue?

A. Make sure FortiManager Access is enabled in the administrator profile

B. Make sure Offline Mode is disabled

C. Make sure the administrator IP address is part of the trusted hosts.

D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM