NSE5_FMG-5.4 Online Practice Questions and Answers

Refer to the following exhibit:

Which of the following statements are true based on this configuration? (Choose two.)

A. Unlocking an ADOM will submit configuration changes automatically to the approval administrator.

B. Unlocking an ADOM will install configuration changes automatically on managed devices.

C. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.

D. The same administrator can lock more than one ADOM at the same time.

View the following exhibit:

An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?

A. port1 on FortiGate and WAN on FortiManager

B. port1 on both FortiGate and FortiManager

C. WAN zone on FortiGate and WAN zone on FortiManager

D. WAN zone on FortiGate and WAN interface on FortiManager

When installation is performed from the FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

B. FortiGate will reject the CLI commands that will cause the tunnel to go down.

C. FortiManager will revert and install a previous configuration revision on the managed FortiGate.

D. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

Which of the following statements are true regarding VPN Manager? (Choose three.)

A. VPN Manager must be enabled on a per ADOM basis.

B. VPN Manager automatically adds newly-registered devices to a VPN community.

C. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

D. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

E. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

Which of the following statements are true regarding an FGFM keepalive message? (Choose two.)

A. It includes the configuration checksum of FortiGate.

B. The keepalive interval for keepalive messages is configured on FortiGate.

C. It is sent only by FortiGate.

D. It is used between FortiManager HA cluster members to make sure cluster members are in sync.

An administrator is unable to log in to FortiManager. Which one of the following troubleshooting step should you take to resolve the issue?

A. Make sure FortiManager Access is enabled in the administrator profile.

B. Make sure ADOMs are enabled and the administrator has access to the Global ADOM.

C. Make sure Offline Mode is disabled.

D. Make sure the administrator IP address is part of the trusted hosts.

As a result of enabling FortiAnalyzer features on FortiManager, which one of the following statements is true?

A. FortiManager can be used only as a logging device.

B. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices.

C. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager.

D. FortiManager will reboot.

An administrator's PC crashed before the administrator could submit a workflow session for approval. After the PC restarted, the administrator noticed that the ADOM was locked from the session before the crash. How can the administrator unlock the ADOM?

A. The administrator must log in as Super_User in order to unlock the ADOM.

B. The administrator must restore the configuration from a previous backup.

C. Delete the previous admin session manually through the FortiManager's GUI or CLI.

D. The administrator must log in using the same administrator account to unlock the ADOM

Which of the following statements about the Policy Check feature on FortiManager is true?

A. It provides recommendation to combine similar policy packages within a ADOM into one single policy package.

B. It compares the policy packages with the revision history, and updates policy packages in the ADOM database.

C. It provides recommendation for optimizing policies in a policy package.

D. It merges and creates dynamic mapping for duplicate objects used in a policy package.

What does a policy package status of Conflict indicate?

A. Policy package configuration has been changed on both FortiManager and the managed device independently.

B. The policy package reports inconsistencies and conflicts during a Policy Consistency Check

C. The policy package doesn't have a FortiGate as the installation target.

D. Policy configuration has never been imported after a device was registered on FortiManager