NSE5_FMG-6.4 Online Practice Questions and Answers

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

A. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

B. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

C. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

D. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

View the following exhibit.

What is the purpose of setting ADOM Mode to Advanced?

A. The setting allows automatic updates to the policy package configuration for a managed device

B. The setting enables the ADOMs feature on FortiManager

C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

D. The setting disables concurrent ADOM access and adds ADOM locking

Refer to the exhibits. Exhibit one.

Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on

FortiManager. During the installation preview stage, the administrator notices that many unset commands

need to be pushed.

What can be the main reason for these unset commands?

A. The DNS addresses in the default system settings are the same as the Training system template

B. The Training system template has other default settings

C. The ADOM is locked by another administrator

D. The Training system template does not have assigned devices

An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.

Which troubleshooting step should you take to resolve the issue?

A. Make sure FortiManager Access is enabled in the administrator profile

B. Make sure Offline Mode is disabled

C. Make sure the administrator IP address is part of the trusted hosts.

D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM

Refer to the following exhibit: Which of the following statements are true based on this configuration? (Choose two.)

A. The same administrator can lock more than one ADOM at the same time

B. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out

C. Unlocking an ADOM will submit configuration changes automatically to the approval administrator

D. Unlocking an ADOM will install configuration automatically on managed devices

Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

A. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.

B. The administrator profile does not have full access privileges like the Super_User profile.

C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.

D. FortiAnalyzer features are not enabled on FortiManager.

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.

Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

A. When a new policy package is created, it automatically assigns the global policies to the new package.

B. When a new policy package is created, you need to assign the global policy package from the global ADOM.

C. When a new policy package is created, you need to reapply the global policy package to the ADOM.

D. When a new policy package is created, you can select the option to assign the global policies to the new package.

Which two items are included in the FortiManager backup? (Choose two.)

A. FortiGuard database

B. Global database

C. Logs

D. All devices

Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local- FortiGate policy package.

When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. 192.168.0.1/24

B. 10.200.1.0/24

C. It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

D. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

D. By an Asterisk (*) at the end of the device name