NSE5_FMG-6.2 Online Practice Questions and Answers

Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.

What is the purpose of this command?

A. It allows FortiGate to unset central management settings.

B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.

C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

D. It allows FortiGate to reboot and restore a previously working firmware image.

Refer to the exhibits. Exhibit one.

Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.

What can be the main reason for these unset commands?

A. The DNS addresses in the default system settings are the same as the Training system template

B. The Training system template has other default settings

C. The ADOM is locked by another administrator

D. The Training system template does not have assigned devices

Refer to the exhibit.

You are using the Quick Install option to install configuration changes on the managed FortiGate.

Which two statements correctly describe the result? (Choose two.)

A. It will not create a new revision in the revision history

B. It installs device-level changes to FortiGate without launching the Install Wizard

C. It cannot be canceled once initiated and changes will be installed on the managed device

D. It provides the option to preview configuration changes prior to installing them

An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

A. Allows FortiManager to download IPS packages

B. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices

C. Allows FortiManager to run real-time debugs on the managed devices

D. Allows FortiManager to automatically configure a default route

Refer to the exhibit.

Which two statements about the output are true? (Choose two.)

A. The latest revision history for the managed FortiGate does match with the FortiGate running configuration

B. Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

C. The latest history for the managed FortiGate does not match with the device-level database

D. Configuration changes directly made on the FortiGate have been automatically updated to device- level database

View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

What configuration setting for FortiGate is part of a device-level database on FortiManager?

A. VIP and IP Pools

B. Firewall policies

C. Security profiles

D. Routing

View the following exhibit: Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)

A. You must install these changes using Install Wizard

B. FortiGate will auto-update the FortiManager's device-level database.

C. FortiManager will create a new revision history.

D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)

A. Backs up all devices and the FortiGuard database.

B. Does not back up firmware images saved on FortiManager

C. Supports FTP, SCP, and SFTP

D. Can be configured from the CLI and GUI

What are the factory default settings on FortiManager? (Choose three.)

A. Username is admin

B. Password is fortinet

C. FortiAnalyzer features are disabled

D. Reports and Event Monitor panes are enabled

E. port1 interface IP address is 192.168.1.99/24