Try Free Fortinet NSE5_FMG-6.4 Real Questions and Answers

test2022-03-16T06:11:31+00:00

Are you worried about your Fortinet NSE5_FMG-6.4 exam? Fortinet NSE 5 – FortiManager 6.4 exam is part of the NSE 5 Network Security Analyst program, and recognizes the successful candidate’s knowledge of and expertise with FortiManager. You can now utilize this free NSE5_FMG-6.4 practice test to gauge your readiness. You will get a comprehensive NSE5_FMG-6.4 questions and answers that will ensure your success on the first attempt!

You can now use our free NSE5_FMG-6.4 practice test to help you prepare for the exam.

Page 1 of 2

1. What are two outcomes of ADOM revisions? (Choose two.)

ADOM revisions can significantly increase the size of the configuration backups.

ADOM revisions can save the current size of the whole ADOM

ADOM revisions can create System Checkpoints for the FortiManager configuration

ADOM revisions can save the current state of all policy packages and objects for an ADOM

2. View the following exhibit.

Which statement is true regarding this failed installation log?

Policy ID 2 is installed without a source address

Policy ID 2 will not be installed

Policy ID 2 is installed in disabled state

Policy ID 2 is installed without a source device

3. View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

Once initiated, the install process cannot be canceled and changes will be installed on the managed device

Will not create new revision in the revision history

Installs device-level changes to FortiGate without launching the Install Wizard

Provides the option to preview configuration changes prior to installing them

4. Topic 3, Main Questions Pool C

An administrator would like to create an SD-WAN using central management.

What steps does the administrator need to perform to create an SD-WAN using central management?

First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route

You must specify a gateway address when you create a default static route

Remove all the interface references such as routes or policies

Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

5. Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

When configuration revision is reverted to previous revision in the revision history

When FortiManager installs device-level changes to a managed device

When FortiManager is auto-updated with configuration changes made directly on a managed device

When changes to device-level database is made on FortiManager

6. View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?

The Install On column value represents successful installation on the managed devices

Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

Policy seq#3 will be installed on the Trainer[NAT] VDOM only

Policy seq#3 will be not installed on any managed device

7. An administrator has enabled Service Access on FortiManager.

What is the purpose of Service Access on the FortiManager interface?

Allows FortiManager to download IPS packages

Allows FortiManager to respond to request for FortiGuard services from FortiGate devices

Allows FortiManager to run real-time debugs on the managed devices

Allows FortiManager to automatically configure a default route

8. An administrator would like to create an SD-WAN using central management in the Training ADOM.

To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

Specify a gateway address when you create a default SD-WAN static route

Enable SD-WAN central management in the Training ADOM

Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings

Remove all the interface references such as routes or policies that will be a part of SD- WAN member interfaces

9. View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

10. What will be the result of reverting to a previous revision version in the revision history?

It will install configuration changes to managed device automatically

It will tag the device settings status as Auto-Update

It will generate a new version ID and remove all other revision history versions

It will modify the device-level database

Page 2 of 2

11. What is the purpose of the Policy Check feature on FortiManager?

To find and provide recommendation to combine multiple separate policy packages into one common policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and delete disabled firewall policies in the policy package

12. Which configuration setting for FortiGate is part of a device-level database on FortiManager?

VIP and IP Pools

Firewall policies

Security profiles

Routing

13. Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

It allows two or more administrators to make configuration changes at the same time, in the same ADO

It disables concurrent read-write access to an ADO

It allows the same administrator to lock more than one ADOM at the same time.

It is used to validate administrator login attempts through external servers.

14. An administrator wants to delete an address object that is currently referenced in a firewall policy.

What can the administrator expect to happen?

FortiManager will not allow the administrator to delete a referenced address object

FortiManager will disable the status of the referenced firewall policy

FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

FortiManager will replace the deleted address object with all address object in the referenced firewall policy