NSE5_FMG-6.0 Online Practice Questions and Answers
Which of the following conditions trigger FortiManager to create a new revision history? (Choose two.)
A. When configuration revision is reverted to previous revision in the revision history
B. When FortiManager installs device-level changes to a managed device
C. When FortiManager is auto-updated with configuration changes made directly on a managed device
D. When changes to device-level database is made on FortiManager
An administrator run the reload failure command: diagnose test deploymanager reload config
A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
B. It installs the latest configuration on the specified FortiGate and update the revision history database.
C. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
D. It installs the provisioning template configuration on the specified FortiGate.
An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?
A. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
B. You must specify a gateway address when you create a default static route
C. Remove all the interface references such as routes or policies
D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SD-WAN firewall policies.
Which of the following statements are true regarding ADOM revisions? (Choose two.)
A. ADOM revisions can significantly increase the size of the configuration backups.
B. ADOM revisions can save the current size of the whole ADOM
C. ADOM revisions can create System Checkpoints for the FortiManager configuration
D. ADOM revisions can save the current state of all policy packages and objects for an ADOM
View the following exhibit: Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)
A. You must install these changes using Install Wizard
B. FortiGate will auto-update the FortiManager's device-level database.
C. FortiManager will create a new revision history.
D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
View the following exhibit.
Which of the following statements are true if FortiManager and FortiGate are behind the NAT devices? (Choose two.)
A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
B. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.
C. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
D. If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
What is the purpose of the Policy Check feature on FortiManager?
A. To find and provide recommendation to combine multiple separate policy packages into one common policy package
B. To find and merge duplicate policies in the policy package
C. To find and provide recommendation for optimizing policies in a policy package
D. To find and delete disabled firewall policies in the policy package
View the following exhibit.
When using Install Config option to install configuration changes to managed FortiGate, which of the
following statements are true? (Choose two.)
A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
B. Will not create new revision in the revision history
C. Installs device-level changes to FortiGate without launching the Install Wizard
D. Provides the option to preview configuration changes prior to installing them
An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the approving a workflow session?
A. Trainer is not a part of workflow approval group
B. Trainer does not have full rights over this ADOM
C. Trainer must close Student's workflow session before approving the request
D. Student, who submitted the workflow session, must first self-approve the request
View the following exhibit.
An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
A. The unused objects that are not tied to the firewall policies will be installed on FortiGate
B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database