NSE5_FMG-5.4 Online Practice Questions and Answers

View the following exhibit.

Which of the following statements are true based on this configuration setting? (Choose two.)

A. This setting will enable the ADOMs feature on FortiManager.

B. This setting is applied globally to all ADOMs.

C. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

D. This setting will allow automatic updates to the policy package configuration for a managed device.

Refer to the following exhibit:

Which of the following statements are true based on this configuration? (Choose two.)

A. Unlocking an ADOM will submit configuration changes automatically to the approval administrator.

B. Unlocking an ADOM will install configuration changes automatically on managed devices.

C. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.

D. The same administrator can lock more than one ADOM at the same time.

View the following exhibit: Which of the following statements are true if the script is executed using Device Database option? (Choose two.)

A. The Device Settings Status will be tagged as Modified

B. Successful execution of script on Device Database will create a new revision history

C. The script history will show successful installation of script on the remote FortiGate

D. You must install these changes using Install Wizard to a managed device

What is the purpose of the Policy Check feature on FortiManager?

A. To find and merge duplicate policies in the policy package.

B. To find and provide recommendation to combine multiple separate policy packages into one common policy package.

C. To find and delete disabled firewall policies in the policy package.

D. To find and provide recommendation for optimizing policies in a policy package.

How are the points calculated when using FortiMeter to deploy FortiOS-VM? (Choose two.)

A. Based on the number of sessions on the mgmt interface of FortiOS-VM.

B. Based on the FortiGuard service option enabled for FortiOS-VM.

C. Based on the traffic usage on port1 and port2 on FortiOS-VM.

D. Based on the amount of traffic (per GB) passing through the FortiOS-VM.

What does the diagnose cdb check policy-assignment command do?

A. Fixes incorrect ADOM-level object references based on the firewall policies.

B. Internally upgrades existing ADOMs to the same ADOM version in order to clean up and correct the ADOM syntax.

C. Verifies and checks dynamic mappings, and removes invalid dynamic mappings.

D. Verifies and corrects global ADOM policy package assignments that have been disassociated from an ADOM.

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

A. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device.

B. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

C. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

D. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

An administrator removed one of the secondary devices from the FortiManager HA cluster. What change will be pushed by the primary FortiManager device?

A. FortiManager will remove the secondary device's IP address and serial number immediately from the central management configuration of managed devices.

B. FortiManager will remove the secondary device's serial number immediately from the central management configuration of managed devices.

C. FortiManager will remove the secondary device's IP address immediately from the central management configuration of managed devices.

D. FortiManager will remove the secondary device's IP address from the server-list configuration central management configuration of managed devices.

An administrator is replacing a device on FortiManager by running the following command: execute device replace sn . What device name and serial number must the administrator use?

A. Device name of the original device and serial number of the replacement device.

B. Device name and serial number of the replacement device.

C. Both device name and serial number of the original device. The administrator must update the hostname manually on the replacement device to match the device name currently on FortiManager.

D. Device name of the replacement device and serial number of the original device.

What does a policy package status of Conflict indicate?

A. Policy package configuration has been changed on both FortiManager and the managed device independently.

B. The policy package reports inconsistencies and conflicts during a Policy Consistency Check

C. The policy package doesn't have a FortiGate as the installation target.

D. Policy configuration has never been imported after a device was registered on FortiManager