NSE5_FMG-6.4 Online Practice Questions and Answers

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

A. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

B. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

C. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

D. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Which configuration setting for FortiGate is part of a device-level database on FortiManager?

A. VIP and IP Pools

B. Firewall policies

C. Security profiles

D. Routing

An administrator wants to delete an address object that is currently referenced in a firewall policy.

What can the administrator expect to happen?

A. FortiManager will not allow the administrator to delete a referenced address object

B. FortiManager will disable the status of the referenced firewall policy

C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy

View the following exhibit:

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

A. You must install these changes using Install Wizard

B. FortiGate will auto-update the FortiManager's device-level database.

C. FortiManager will create a new revision history.

D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

View the following exhibit.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

B. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

C. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

D. If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

An administrator has enabled Service Access on FortiManager.

What is the purpose of Service Access on the FortiManager interface?

A. Allows FortiManager to download IPS packages

B. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices

C. Allows FortiManager to run real-time debugs on the managed devices

D. Allows FortiManager to automatically configure a default route

What is the purpose of ADOM revisions?

A. To create System Checkpoints for the FortiManager configuration.

B. To save the current state of the whole ADOM.

C. To save the current state of all policy packages and objects for an ADOM.

D. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

What does a policy package status of Conflict indicate?

A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.

B. The policy package does not have a FortiGate as the installation target.

C. The policy package configuration has been changed on both FortiManager and the managed device independently.

D. The policy configuration has never been imported after a device was registered on FortiManager.

View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

A. FortiManager updated the object ALL using FortiGate's value in its database

B. FortiManager updated the object ALL using FortiManager's value in its database

C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

D. FortiManager installed the object ALL with the updated value.

What does the diagnose dvm check-integrity command do? (Choose two.)

A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

B. Verifies and corrects unregistered, registered, and deleted device states

C. Verifies and corrects database schemas in all object tables

D. Verifies and corrects duplicate VDOM entries