NSE5_FMG-6.2 Dumps Updated Nov 17, 2021 Practice Test and 85 unique questions
2021 Latest 100% Exam Passing Ratio - NSE5_FMG-6.2 Dumps PDF
NEW QUESTION 21
View the following exhibit. Which statement is true regarding this failed installation log?
- A. Policy ID 2 will not be installed
- B. Policy ID 2 is installed without a source device
- C. Policy ID 2 is installed without a source address
- D. Policy ID 2 is installed in disabled state
Answer: B
Explanation:
Confirmed on FortiGate using CLI cmds above. The policy created above will be created and shows up in the "IPv4 Policy" section (so it is enabled), but does not have a device listed as the source device.
NEW QUESTION 22
An administrator run the reload failure command: diagnose test deploymanager reload config <deviceid> on FortiManager. What does this command do?
- A. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
- B. It installs the latest configuration on the specified FortiGate and update the revision history database.
- C. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
- D. It installs the provisioning template configuration on the specified FortiGate.
Answer: C
Explanation:
diagnose test deploymanager reloadconf: Reload configuration from the FortiGate
https://docs-fortinet.com/uploaded/files/3874/FortiManager%205.6.0%20CLI%20Reference.pdf
NEW QUESTION 23
Which two items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate license information
- B. FortiGate configuration checksum
- C. FortiGate uptime
- D. FortiGate IPS version
Answer: B,D
NEW QUESTION 24
Refer to the exhibit. Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)
- A. It supports the FortiManager script feature
- B. It allows making configuration changes for managed devices on FortiManager panes
- C. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate
- D. You cannot assign the same ADOM to multiple administrators
Answer: B,C
NEW QUESTION 25
Refer to the exhibit. Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
- A. It disables concurrent read-write access to an ADOM.
- B. It allows the same administrator to lock more than one ADOM at the same time.
- C. It is used to validate administrator login attempts through external servers.
- D. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.
Answer: A,B
NEW QUESTION 26
An administrator would like to create an SD-WAN using central management in the Training ADOM.
To create an SD-WAN using central management, which two steps must be completed? (Choose two.)
- A. Remove all the interface references such as routes or policies that will be a part of SD-WAN member interfaces
- B. Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings
- C. Specify a gateway address when you create a default SD-WAN static route
- D. Enable SD-WAN central management in the Training ADOM
Answer: A,D
NEW QUESTION 27
Refer to the exhibit. An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)
- A. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
- B. The administrator profile does not have full access privileges like the Super_User profile.
- C. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
- D. FortiAnalyzer features are not enabled on FortiManager.
Answer: A,D
NEW QUESTION 28
Which two statements are correct regarding FortiGuard features on FortiManager?(Choose two)
- A. FortiManager can function as a local FortiGuard Distribution Server (FDS).
- B. When FortiManager is configured for closed network operation, it can connect to public FDS servers to obtain managed device information and sync packages.
- C. FortiGuard information is not synchronized across a FortiManager cluster.
- D. In FortiManger HA only master FortiManager can act as an FDS server.
Answer: A,C
NEW QUESTION 29
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?
- A. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
- B. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
- C. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
- D. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.
Answer: C
Explanation:
https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/0800_Managing%20policy%20packages/1200_Assign
%20a%20global%20policy%20package.htm
NEW QUESTION 30
View the following exhibit:
Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)
- A. You must install these changes using Install Wizard
- B. FortiManager will create a new revision history.
- C. FortiGate will auto-update the FortiManager's device-level database.
- D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
Answer: B,C
NEW QUESTION 31
An administrator has enabled Service Access on FortiManager.
What is the purpose of Service Access on the FortiManager interface?
- A. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices
- B. Allows FortiManager to download IPS packages
- C. Allows FortiManager to automatically configure a default route
- D. Allows FortiManager to run real-time debugs on the managed devices
Answer: A
NEW QUESTION 32
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?
- A. FortiManager will replace the deleted address object with the all address object in the referenced firewall policy.
- B. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy.
- C. FortiManager will not allow the administrator to delete a referenced address object.
- D. FortiManager will disable the status of the referenced firewall policy.
Answer: B
NEW QUESTION 33
Which two statements are correct for configuration changes made by FortiManager scripts? (Choose two)
- A. When run on the device database, you can install changes to the managed FortiGate devices using the installation wizard.
- B. When run on the device database, changes are automatically installed to the managed FortiGate devices.
- C. When run on managed devices directly, changes are automatically installed to the managed FortiGate devices.
- D. When run on managed devices directly, you can install changes to the managed FortiGate devices using the installation wizard.
Answer: A,C
Explanation:
A script can make many changes to a managed device and are useful for bulk configuration changes and consistency across multiple managed devices. Scripts can be run in three different ways:
Device Database: By default, a script can be executed on the device database. It is recommended you run the changes on the device database (default setting), as this allows you to check what configuration changes you will send to the managed device. Once scripts are run on the device database you can then install these changes to a managed device using the installation wizard.
Policy Package, ADOM database: A script can be run here to create ADOM level objects that will be applied to your managed devices and can then be installed using the installation wizard.
Remote FortiGate Directly (via CLI): A script can be executed directly on the device and you don't need to install these changes using the installation wizard. As the changes are directly installed on the managed device, no option is provided to verify and check the configuration changes through FortiManager.
NEW QUESTION 34
An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate.
In which database will the configuration be saved?
- A. Device-level database
- B. ADOM-level database
- C. Revision history database
- D. Configuration-level database
Answer: B
NEW QUESTION 35
Refer to the exhibit. You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)
- A. It will not create a new revision in the revision history
- B. It installs device-level changes to FortiGate without launching the Install Wizard
- C. It provides the option to preview configuration changes prior to installing them
- D. It cannot be canceled once initiated and changes will be installed on the managed device
Answer: B,D
NEW QUESTION 36
Which of the following statements are true regarding ADOM revisions? (Choose two.)
- A. ADOM revisions can save the current size of the whole ADOM
- B. ADOM revisions can create System Checkpoints for the FortiManager configuration
- C. ADOM revisions can save the current state of all policy packages and objects for an ADOM
- D. ADOM revisions can significantly increase the size of the configuration backups.
Answer: C,D
NEW QUESTION 37
An administrator run the reload failure command: diagnose test deploymanager reload config
<deviceid> on FortiManager. What does this command do?
- A. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
- B. It installs the latest configuration on the specified FortiGate and update the revision history database.
- C. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
- D. It installs the provisioning template configuration on the specified FortiGate.
Answer: C
NEW QUESTION 38
......
Verified NSE5_FMG-6.2 dumps Q&As - 100% Pass from 2Pass4sure: https://www.2pass4sure.com/Fortinet-NSE-5/NSE5_FMG-6.2-actual-exam-braindumps.html