Free Sales Ending Soon - Use Real NSE5_FMG-6.2 PDF Questions [Oct 21, 2021]
Updated Oct-2021 Exam NSE5_FMG-6.2 Dumps - Pass Your Certification Exam
NEW QUESTION 23
Refer to the exhibit.
Which statement about the object named ALL is true?
- A. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
- B. FortiManager installed the object ALL with the updated value.
- C. FortiManager updated the object ALL using the FortiManager value in its database.
- D. FortiManager updated the object ALL using the FortiGate value in its database.
Answer: D
NEW QUESTION 24
An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student.
However, Trainer is unable to approve the approving a workflow session?
- A. Trainer must close Student's workflow session before approving the request
- B. Trainer is not a part of workflow approval group
- C. Trainer does not have full rights over this ADOM
- D. Student, who submitted the workflow session, must first self-approve the request
Answer: B
Explanation:
An administrator must be part of an approval group, and have rights over the ADOM in which the session was created, in order to approve a session. Being part of the 'Super_Admin' profile is not enough to approve a session.
NEW QUESTION 25
View the following exhibit.
Based on the configuration setting, which one of the following statements is true?
- A. The setting disables concurrent ADOM access and adds ADOM locking
- B. The setting allows automatic updates to the policy package configuration for a managed device
- C. The setting enables the ADOMs feature on FortiManager
- D. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
Answer: D
NEW QUESTION 26
What does a policy package status of Conflict indicate?
- A. The policy package does not have a FortiGate as the installation target.
- B. The policy package configuration has been changed on both FortiManager and the managed device independently.
- C. The policy configuration has never been imported after a device was registered on FortiManager.
- D. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
Answer: D
NEW QUESTION 27
Refer to the exhibit. You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)
- A. It will not create a new revision in the revision history
- B. It installs device-level changes to FortiGate without launching the Install Wizard
- C. It provides the option to preview configuration changes prior to installing them
- D. It cannot be canceled once initiated and changes will be installed on the managed device
Answer: B,D
NEW QUESTION 28
Refer to the exhibit. An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)
- A. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
- B. The administrator profile does not have full access privileges like the Super_User profile.
- C. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
- D. FortiAnalyzer features are not enabled on FortiManager.
Answer: A,D
NEW QUESTION 29
Refer to the exhibit.
Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
- A. It disables concurrent read-write access to an ADOM.
- B. It allows the same administrator to lock more than one ADOM at the same time.
- C. It is used to validate administrator login attempts through external servers.
- D. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.
Answer: A,B
Explanation:
Reference:
https://docs.fortinet.com/document/fortimanager/6.0.4/administration-guide/86456/concurrentadom-access
NEW QUESTION 30
Refer to the exhibit.
An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)
- A. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
- B. The administrator profile does not have full access privileges like the Super_User profile.
- C. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
- D. FortiAnalyzer features are not enabled on FortiManager.
Answer: A,D
NEW QUESTION 31
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?
- A. The FortiGate will be automatically added to the Training ADOM.
- B. By default, the unregistered FortiGate will appear in the root ADOM.
- C. The FortiGate will be added automatically to the default ADOM named FortiGate.
- D. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard
Answer: B
NEW QUESTION 32
View the following exhibit:
Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)
- A. You must install these changes using Install Wizard
- B. FortiManager will create a new revision history.
- C. FortiGate will auto-update the FortiManager's device-level database.
- D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
Answer: B,C
NEW QUESTION 33
Which ports are commonly used by FortiManager? (Choose two.)
- A. TCP 514 for remote management of a FortiGate unit.
- B. TCP 541 for remote management of a FortiGate unit.
- C. TCP 5199 HA heartbeat or synchronization (FortiManager HA cluster).
- D. TCP 703 HA heartbeat or synchronization (FortiManager HA cluster).
Answer: A,D
NEW QUESTION 34
An administrator has added all the devices in a Security Fabric group to FortiManager. How does the administrator identify the root FortiGate?
- A. By an Asterisk (*) at the end of the device name
- B. By a dollar symbol ($) at the end of the device name
- C. By an at symbol (@) at the end of the device name
- D. By a Question: mark(?) at the end of the device name
Answer: A
NEW QUESTION 35
Refer to the following exhibit:
Which of the following statements are true based on this configuration? (Choose two.)
- A. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out
- B. Unlocking an ADOM will install configuration automatically on managed devices
- C. Unlocking an ADOM will submit configuration changes automatically to the approval administrator
- D. The same administrator can lock more than one ADOM at the same time
Answer: A,D
Explanation:
To enable ADOM locking and disable concurrent ADOM access:
config system global
set workspace-mode normal
end
Reference: http://help.fortinet.com/fmgr/cli/5-6-2/Document/0800_ADOMs/200_Configuring+.htm
NEW QUESTION 36
View the following exhibit, which shows the Download Import Report:
Why it is failing to import firewall policy ID 2?
- A. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager
- B. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate
- C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager
- D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
Answer: B
Explanation:
FortiManager can create a dynamic mapping for an address object, if the address object name is the same, but contains a different value locally. However, there is one restriction - the associated interface cannot be different. This is because, at the ADOM level, this address object might be used by other policy packages, which might not have same interfaces." Address object name in this case is "REMOTE_SUBNET". The interface binding has 2 different interfaces 'ANY' and
'Port6'. They cannot be different.
NEW QUESTION 37
Which two statements regarding device management on FortiManager are true? (Choose two.)
- A. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
- B. The maximum number of managed devices for each ADOM is 500.
- C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
- D. FortiGate devices in HA cluster devices are counted as a single device.
Answer: C,D
NEW QUESTION 38
Which two items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate license information
- B. FortiGate configuration checksum
- C. FortiGate uptime
- D. FortiGate IPS version
Answer: B,D
NEW QUESTION 39
An administrator is replacing a device on FortiManager by running the following command:
execute device replace sn <devname> <serialnum>.
What device name and serial number must the administrator use?
- A. Device name of the replacement device and serial number of the original device.
- B. Device name and serial number of the replacement device.
- C. Device name and serial number of the original device.
- D. Device name of the original device and serial number of the replacement device.
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 40
Refer to the exhibit.
Which two statements are true if the script is executed using the Device Database option? (Choose two.)
- A. The script history will show successful installation of the script on the remote FortiGate
- B. You must install these changes using the Install Wizard to a managed device
- C. The successful execution of a script on the Device Database will create a new revision history
- D. The Device Settings Status will be tagged as Modified
Answer: A,C
NEW QUESTION 41
......
NSE5_FMG-6.2 Dumps To Pass Fortinet NSE 5 Exam in One Day : https://www.prep4sureguide.com/NSE5_FMG-6.2-prep4sure-exam-guide.html