NSE5_FMG-6.4 Online Practice Questions and Answers

Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

A. When configuration revision is reverted to previous revision in the revision history

B. When FortiManager installs device-level changes to a managed device

C. When FortiManager is auto-updated with configuration changes made directly on a managed device

D. When changes to device-level database is made on FortiManager

What will happen if FortiAnalyzer features are enabled on FortiManager?

A. FortiManager will reboot

B. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager

C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices

D. FortiManager can be used only as a logging device.

View the following exhibit.

Which statement is true regarding this failed installation log?

A. Policy ID 2 is installed without a source address

B. Policy ID 2 will not be installed

C. Policy ID 2 is installed in disabled state

D. Policy ID 2 is installed without a source device

Refer to the exhibit.

You are using the Quick Install option to install configuration changes on the managed FortiGate.

Which two statements correctly describe the result? (Choose two.)

A. It will not create a new revision in the revision history

B. It installs device-level changes to FortiGate without launching the Install Wizard

C. It cannot be canceled once initiated and changes will be installed on the managed device

D. It provides the option to preview configuration changes prior to installing them

View the following exhibit.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

B. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

C. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

D. If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local- FortiGate policy package.

When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. 192.168.0.1/24

B. 10.200.1.0/24

C. It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

D. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

An administrator is replacing a device on FortiManager by running the following command:

execute device replace sn .

What device name and serial number must the administrator use?

A. Device name and serial number of the original device.

B. Device name and serial number of the replacement device.

C. Device name of the replacement device and serial number of the original device.

D. Device name of the original device and serial number of the replacement device.

Refer to the exhibit.

Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

A. It supports the FortiManager script feature

B. It allows making configuration changes for managed devices on FortiManager panes

C. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

D. You cannot assign the same ADOM to multiple administrators

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration

B. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

C. The Security Fabric settings are part of the device level settings

D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.

Which interface must the administrator select in the static route device drop-down list?

A. port2

B. virtual-wan-link

C. port1

D. auto-discovery