NSE5_FMG-6.2 Online Practice Questions and Answers

Which two statements regarding device management on FortiManager are true? (Choose two.)

A. FortiGate devices in HA cluster devices are counted as a single device.

B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

D. The maximum number of managed devices for each ADOM is 500.

Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

A. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.

B. The administrator profile does not have full access privileges like the Super_User profile.

C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.

D. FortiAnalyzer features are not enabled on FortiManager.

What does a policy package status of Conflict indicate?

A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.

B. The policy package does not have a FortiGate as the installation target.

C. The policy package configuration has been changed on both FortiManager and the managed device independently.

D. The policy configuration has never been imported after a device was registered on FortiManager.

An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

A. Allows FortiManager to download IPS packages

B. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices

C. Allows FortiManager to run real-time debugs on the managed devices

D. Allows FortiManager to automatically configure a default route

Which of the following items does an FGFM keepalive message include? (Choose two.)

A. FortiGate uptime

B. FortiGate license information

C. FortiGate IPS version

D. FortiGate configuration checksum

As a result of enabling FortiAnalyzer features on FortiManager, which of the following statements is true?

A. FortiManager will reboot

B. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager

C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices

D. FortiManager can be used only as a logging device.

Which of the following statements are true regarding SD-WAN Central Management? (Choose three.)

A. SD-WAN must be enabled on per-ADOM basis

B. SD-WAN settings can be installed on multiple FortiGate devices at the same time

C. You can create multiple SD-WAN interfaces per VDOM

D. When you configure an SD-WAN, you must specify at least two member interfaces.

E. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

What does a policy package status of Modified indicate?

A. FortiManager is unable to determine the policy package status

B. The policy package was never imported after a device was registered on FortiManager

C. Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

D. Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

What is the purpose of the Policy Check feature on FortiManager?

A. To find and provide recommendation to combine multiple separate policy packages into one common policy package

B. To find and merge duplicate policies in the policy package

C. To find and provide recommendation for optimizing policies in a policy package

D. To find and delete disabled firewall policies in the policy package

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. 10.0.1.0/24

B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

C. 192.168.0.1/24

D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.