Fortinet NSE 5 NSE5_FMG-6.2 Real Exam Questions and Answers FREE Updated on Aug 26, 2021
NSE5_FMG-6.2 Ultimate Study Guide - BraindumpsPass
NEW QUESTION 34
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?
- A. auto-discovery
- B. port1
- C. port2
- D. virtual-wan-link
Answer: D
NEW QUESTION 35
Refer to the exhibit.
An administrator is importing a new device to FortiManager and has selected the options shown in the exhibit.
What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
- A. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate.
- B. The unused objects that are not tied to the firewall policies in the policy package will be deleted from the FortiManager database.
- C. The unused objects that are not tied to the firewall policies will be installed on FortiGate.
- D. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted.
Answer: D
NEW QUESTION 36
View the following exhibit.
What of the following statements are true regarding the output? (Choose two.)
- A. The latest revision history for the managed FortiGate does match with the FortiGate running configuration
- B. The latest history for the managed FortiGate does not match with the device-level database
- C. Configuration changes directly made on the FortiGate have been automatically updated to device-level database
- D. Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed
Answer: A,C
Explanation:
This example shows that FortiGate configuration is in sync with the latest running revision history. However, change have been made to device-level settings.
Once the changes are installed on FortiGate, it will show db: unmodified and cond:OK.
NEW QUESTION 37
What does a policy package status of Conflict indicate?
- A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
- B. The policy configuration has never been imported after a device was registered on FortiManager.
- C. The policy package does not have a FortiGate as the installation target.
- D. The policy package configuration has been changed on both FortiManager and the managed device independently.
Answer: A
NEW QUESTION 38
Refer to the exhibit.
Which statement about the object named ALL is true?
- A. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
- B. FortiManager updated the object ALL using the FortiManager value in its database.
- C. FortiManager installed the object ALL with the updated value.
- D. FortiManager updated the object ALL using the FortiGate value in its database.
Answer: D
NEW QUESTION 39
Which two statements regarding device management on FortiManager are true? (Choose two.)
- A. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
- B. The maximum number of managed devices for each ADOM is 500.
- C. FortiGate devices in HA cluster devices are counted as a single device.
- D. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
Answer: C,D
NEW QUESTION 40
View the following exhibit.
An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
- A. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database
- B. The unused objects that are not tied to the firewall policies will be installed on FortiGate
- C. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
- D. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
Answer: D
NEW QUESTION 41
What configuration setting for FortiGate is part of a device-level database on FortiManager?
- A. Security profiles
- B. VIP and IP Pools
- C. Firewall policies
- D. Routing
Answer: D
Explanation:
The device-level database includes configuration details related to device-level settings, such as interfaces, DNS, routing, and more.
The ADOM-level database includes configuration details related to firewall policies, objects, and security profiles.
NEW QUESTION 42
Refer to the exhibit. An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?
- A. It allows FortiGate to reboot and recover the previous configuration from its configuration file.
- B. It allows FortiGate to unset central management settings.
- C. It allows FortiGate to reboot and restore a previously working firmware image.
- D. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.
Answer: A
NEW QUESTION 43
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices.
The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?
- A. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard
- B. The FortiGate will be added automatically to the default ADOM named FortiGate.
- C. By default, the unregistered FortiGate will appear in the root ADOM.
- D. The FortiGate will be automatically added to the Training ADOM.
Answer: C
NEW QUESTION 44
View the following exhibit:
Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)
- A. FortiManager will create a new revision history.
- B. You must install these changes using Install Wizard
- C. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
- D. FortiGate will auto-update the FortiManager's device-level database.
Answer: A,D
NEW QUESTION 45
Refer to the exhibit. Review the Download Import Report.
Why is it failing to import firewall policy ID 2?
- A. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
- B. The address object used in policy ID 2 already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.
- C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager.
- D. Policy ID 2 is configured from the interface any to port6. FortiManager rejects to import this policy because the any interface does not exist on FortiManager.
Answer: B
NEW QUESTION 46
Which of the following items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate IPS version
- B. FortiGate license information
- C. FortiGate uptime
- D. FortiGate configuration checksum
Answer: B,D
Explanation:
FGFM Keepalive Messages configured on FortiManager. Only FortiGate sends a keepalive message to FortiManager, regardless of which device established the FGFM tunnel. FortiGate also sends a configuration checksum to confirm synchronization as a part of keepalive.
NEW QUESTION 47
Which of the following items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate uptime
- B. FortiGate IPS version
- C. FortiGate configuration checksum
- D. FortiGate license information
Answer: B,C
NEW QUESTION 48
View the following exhibit. An administrator is importing a new device to FortiManager and has selected the shown options.
What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
- A. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database
- B. The unused objects that are not tied to the firewall policies will be installed on FortiGate
- C. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
- D. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
Answer: D
Explanation:
Regardless of whether you choose to import only policy-dependent objects or all objects, the system will delete orphan (unused) object that are not tied to policies locally on FortiGate in the next installation.
NEW QUESTION 49
What does a policy package status of Modified indicate?
- A. Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager
- B. The policy package was never imported after a device was registered on FortiManager
- C. Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
- D. FortiManager is unable to determine the policy package status
Answer: C
NEW QUESTION 50
View the following exhibit. An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package.
When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
- B. Local-FortiGate will automatically choose an IP Network based on its network interface settings.
- C. 192.168.0.1/24
- D. 10.0.1.0/24
Answer: D
Explanation:
In the example, the dynamic address object LocalLan refers to the internal network address of the managed firewalls. The object has a default value of
192.168.1.0/24. The mapping rules are defined per device. For Remote-FortiGate, the address object LocalLan referes to 10.10.11.0/24. The devices in the ADOM that do not have dynamic mapping for LocalLan have a default value of 192.168.1.0/24.
NEW QUESTION 51
In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?
- A. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
- B. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.
- C. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.
- D. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device
Answer: B
Explanation:
If the primary FortiManager unit fails you must manually configure one of the backup units to become the primary unit. The new primary unit will have the same IP addresses as it did when it was the backup unit Reconfigure the cluster by removing the failed unit from the cluster configuration. If the primary unit has failed, this means configuring one of the backup units to be the primary unit and adding peer IPs for all of the remaining backup units to the new primary unit configuration.
NEW QUESTION 52
An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?
- A. By an Asterisk (*) at the end of the device name
- B. By a question no mark(?) at the end of the device name
- C. By a dollar symbol ($) at the end of the device name
- D. By an at symbol (@) at the end of the device name
Answer: A
NEW QUESTION 53
An administrator would like to create an SD-WAN using central management in the Training ADOM.
To create an SD-WAN using central management, which two steps must be completed? (Choose two.)
- A. Specify a gateway address when you create a default SD-WAN static route
- B. Enable SD-WAN central management in the Training ADOM
- C. Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings
- D. Remove all the interface references such as routes or policies that will be a part of SD-WAN member interfaces
Answer: B,D
NEW QUESTION 54
......
Ultimate Guide to Prepare NSE5_FMG-6.2 Certification Exam for Fortinet NSE 5: https://www.braindumpspass.com/Fortinet/NSE5_FMG-6.2-practice-exam-dumps.html
