NSE5_FMG-6.4 Online Practice Questions and Answers

An administrator wants to delete an address object that is currently referenced in a firewall policy.

What can the administrator expect to happen?

A. FortiManager will not allow the administrator to delete a referenced address object

B. FortiManager will disable the status of the referenced firewall policy

C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy

What are two outcomes of ADOM revisions? (Choose two.)

A. ADOM revisions can significantly increase the size of the configuration backups.

B. ADOM revisions can save the current size of the whole ADOM

C. ADOM revisions can create System Checkpoints for the FortiManager configuration

D. ADOM revisions can save the current state of all policy packages and objects for an ADOM

What is the purpose of the Policy Check feature on FortiManager?

A. To find and provide recommendation to combine multiple separate policy packages into one common policy package

B. To find and merge duplicate policies in the policy package

C. To find and provide recommendation for optimizing policies in a policy package

D. To find and delete disabled firewall policies in the policy package

An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.

Which troubleshooting step should you take to resolve the issue?

A. Make sure FortiManager Access is enabled in the administrator profile

B. Make sure Offline Mode is disabled

C. Make sure the administrator IP address is part of the trusted hosts.

D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM

Which two statements regarding device management on FortiManager are true? (Choose two.)

A. FortiGate devices in HA cluster devices are counted as a single device.

B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

D. The maximum number of managed devices for each ADOM is 500.

An administrator is replacing a device on FortiManager by running the following command:

execute device replace sn .

What device name and serial number must the administrator use?

A. Device name and serial number of the original device.

B. Device name and serial number of the replacement device.

C. Device name of the replacement device and serial number of the original device.

D. Device name of the original device and serial number of the replacement device.

An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.

How can the administrator unlock the ADOM?

A. Restore the configuration from a previous backup.

B. Log in as Super_User in order to unlock the ADOM.

C. Log in using the same administrator account to unlock the ADOM.

D. Delete the previous admin session manually through the FortiManager GUI or CLI.

Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)

A. Backs up all devices and the FortiGuard database.

B. Does not back up firmware images saved on FortiManager

C. Supports FTP, SCP, and SFTP

D. Can be configured from the CLI and GUI

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local- FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. 10.0.1.0/24

B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

C. 192.168.0.1/24

D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.

An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.

Which interface must the administrator select in the static route device drop-down list?

A. port2

B. virtual-wan-link

C. port1

D. auto-discovery