NSE5_FMG-6.0 Online Practice Questions and Answers

Which of the following conditions trigger FortiManager to create a new revision history? (Choose two.)

A. When configuration revision is reverted to previous revision in the revision history

B. When FortiManager installs device-level changes to a managed device

C. When FortiManager is auto-updated with configuration changes made directly on a managed device

D. When changes to device-level database is made on FortiManager

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

B. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

An administrator run the reload failure command: diagnose test deploymanager reload config on FortiManager. What does this command do?

A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.

B. It installs the latest configuration on the specified FortiGate and update the revision history database.

C. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.

D. It installs the provisioning template configuration on the specified FortiGate.

Which of the following statements are true regarding SD-WAN Central Management? (Choose three.)

A. SD-WAN must be enabled on per-ADOM basis

B. SD-WAN settings can be installed on multiple FortiGate devices at the same time

C. You can create multiple SD-WAN interfaces per VDOM

D. When you configure an SD-WAN, you must specify at least two member interfaces.

E. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

An administrator has added all the devices in a Security Fabric group to FortiManager. How does the administrator identify the root FortiGate?

A. By a dollar symbol ($) at the end of the device name

B. By an at symbol (@) at the end of the device name

C. By a question mark(?) at the end of the device name

D. By an Asterisk (*) at the end of the device name

View the following exhibit.

Which one of the following statements is true regarding installation targets in use Install On column?

A. The Install On column value represents successful installation on the managed devices

B. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

C. Policy seq#3 will be installed on the Trainer[NAT] VDOM only

D. Policy seq#3 will be not installed on any managed device

When installation is performed from the FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

B. FortiManager will revert and install a previous configuration revision on the managed FortiGate.

C. FortiGate will reject the CLI commands that will cause the tunnel to go down.

D. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

What does a policy package status of Modified indicate?

A. FortiManager is unable to determine the policy package status

B. The policy package was never imported after a device was registered on FortiManager

C. Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

D. Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

An administrator is unable to log in to FortiManager. Which one of the following troubleshooting step should you take to resolve the issue?

A. Make sure FortiManager Access is enabled in the administrator profile

B. Make sure Offline Mode is disabled

C. Make sure the administrator IP address is part of the trusted hosts.

D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. 10.0.1.0/24

B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

C. 192.168.0.1/24

D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.