NSE5_FMG-5.4 Online Practice Questions and Answers

View the following exhibit:

An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session. What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

A. Trainer must close Student's workflow session before approving the request.

B. Trainer does not have full rights over this ADOM.

C. Trainer is not a part of workflow approval group.

D. Student, who submitted the workflow session, must first self-approve the request.

View the following exhibit:

An administrator is importing a new device to FortiManager and has selected the shown options.

What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

A. The unused objects that are not tied to the firewall policies will be installed on FortiGate.

B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate.

C. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database.

D. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted.

View the following exhibit:

An administrator logs in to the FortiManager GUI and sees these panes. Which of the following can be the reason the FortiAnalyzer feature panes don't appear? (Choose two.)

A. The administrator IP address is not a part of the trusted hosts configured on FortiManager's interfaces.

B. FortiAnalyzer features are not enabled on FortiManager.

C. The administrator logged in using unsecure protocol HTTP, so the view is restricted.

D. The administrator profile does not have full access privileges like the Super_User profile

An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

A. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.

B. Changes to the AP's state must be performed directly on the managed FortiGate.

C. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

D. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

An administrator has assigned a global policy package to custom ADOM1. What will happen if the administrator tries to create a new policy package in custom ADOM1?

A. When a new policy package is created, you need to reapply the global policy package to the ADOM.

B. When creating a new policy package, can select the option to assign the global policies to the new package.

C. When a new policy package is created, it automatically assigns the global policies to the new package.

D. When a new policy package is created, you must assign the global policy package from the global ADOM.

An administrator is unable to log in to FortiManager. Which one of the following troubleshooting step should you take to resolve the issue?

A. Make sure FortiManager Access is enabled in the administrator profile.

B. Make sure ADOMs are enabled and the administrator has access to the Global ADOM.

C. Make sure Offline Mode is disabled.

D. Make sure the administrator IP address is part of the trusted hosts.

What type of access is automatically enabled on an interface after it is added to FortiClient Manager?

A. Device Detection

B. FortiTelemetry

C. CAPWAP

D. FMG-Access

What configuration setting for FortiGate is part of a device-level database on FortiManager?

A. Routing

B. Security profiles

C. VIP and IP Pools

D. Firewall policies

An administrator's PC crashed before the administrator could submit a workflow session for approval. After the PC restarted, the administrator noticed that the ADOM was locked from the session before the crash. How can the administrator unlock the ADOM?

A. The administrator must log in as Super_User in order to unlock the ADOM.

B. The administrator must restore the configuration from a previous backup.

C. Delete the previous admin session manually through the FortiManager's GUI or CLI.

D. The administrator must log in using the same administrator account to unlock the ADOM

An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

A. Allows FortiManager to run real-time debugs on the managed devices.

B. Allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.

C. Allows FortiManager to automatically configure a default route.

D. Allows FortiManager to download IPS packages.