NSE5_FMG-6.2 Certification Exam Dumps Questions in here [Nov-2021]
Updated NSE5_FMG-6.2 Exam Practice Test Questions
NEW QUESTION 51
When a FortiManager HA primary device fails, which two statements are correct for promoting a secondary device to the primary role? (Choose two)
- A. Must manually reconfigure one of the secondary devices to become the master device.
- B. The FortiManager HA suports IP takeover where an HA state transition does not require manual intervention.
- C. Reboot is required when promoting from secondary to primary.
- D. All other secondary devices must be reconfigured to point to new primary device.
Answer: A,D
NEW QUESTION 52
Refer to the exhibit. Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?
- A. Policy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets.
- B. The Install On column value represents successful installations on the managed devices.
- C. Policy seq.# 3 will be installed on the Trainer[NAT] VDOM only.
- D. Policy seq.# 3 will not be installed on any managed device.
Answer: A
NEW QUESTION 53
What does a policy package status of Conflict indicate?
- A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
- B. The policy package configuration has been changed on both FortiManager and the managed device independently.
- C. The policy configuration has never been imported after a device was registered on FortiManager.
- D. The policy package does not have a FortiGate as the installation target.
Answer: A
NEW QUESTION 54
Setting workspace-mode to normal, as shown in the exhibit, allows what on FortiManager? (Choose two) config system global set workspace-mode normal end
- A. VDOM locking
- B. Restricted concurrent access
- C. ADOM locking
- D. Unrestricted concurrent access
Answer: B,C
NEW QUESTION 55
View the following exhibit:
Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)
- A. You must install these changes using Install Wizard
- B. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
- C. FortiGate will auto-update the FortiManager's device-level database.
- D. FortiManager will create a new revision history.
Answer: B,C
NEW QUESTION 56
Which two statements are correct regarding FortiGuard features on FortiManager?(Choose two)
- A. In FortiManger HA only master FortiManager can act as an FDS server.
- B. FortiGuard information is not synchronized across a FortiManager cluster.
- C. When FortiManager is configured for closed network operation, it can connect to public FDS servers to obtain managed device information and sync packages.
- D. FortiManager can function as a local FortiGuard Distribution Server (FDS).
Answer: B,D
NEW QUESTION 57
The service access settings for a FortiManager network interface relate to which product feature?
- A. FortiGuard
- B. FortiView
- C. Device Manger
- D. Policy & Objects
Answer: A
NEW QUESTION 58
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices.
The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?
- A. The FortiGate will be added automatically to the default ADOM named FortiGate.
- B. By default, the unregistered FortiGate will appear in the root ADOM.
- C. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard
- D. The FortiGate will be automatically added to the Training ADOM.
Answer: B
NEW QUESTION 59
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI.
Both port1 and port2 are part of the SD-WAN member interfaces. Which interface must the administrator select in the static route device drop-down list?
- A. port1
- B. auto-discovery
- C. virtual-wan-link
- D. port2
Answer: C
NEW QUESTION 60
Which two statements are correct for configuration changes made by FortiManager scripts? (Choose two)
- A. When run on the device database, you can install changes to the managed FortiGate devices using the installation wizard.
- B. When run on managed devices directly, changes are automatically installed to the managed FortiGate devices.
- C. When run on managed devices directly, you can install changes to the managed FortiGate devices using the installation wizard.
- D. When run on the device database, changes are automatically installed to the managed FortiGate devices.
Answer: A,B
Explanation:
A script can make many changes to a managed device and are useful for bulk configuration changes and consistency across multiple managed devices. Scripts can be run in three different ways:
Device Database: By default, a script can be executed on the device database. It is recommended you run the changes on the device database (default setting), as this allows you to check what configuration changes you will send to the managed device. Once scripts are run on the device database you can then install these changes to a managed device using the installation wizard.
Policy Package, ADOM database: A script can be run here to create ADOM level objects that will be applied to your managed devices and can then be installed using the installation wizard.
Remote FortiGate Directly (via CLI): A script can be executed directly on the device and you don't need to install these changes using the installation wizard. As the changes are directly installed on the managed device, no option is provided to verify and check the configuration changes through FortiManager.
NEW QUESTION 61
Which of the following items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate configuration checksum
- B. FortiGate license information
- C. FortiGate IPS version
- D. FortiGate uptime
Answer: A,B
Explanation:
FGFM Keepalive Messages configured on FortiManager. Only FortiGate sends a keepalive message to FortiManager, regardless of which device established the FGFM tunnel. FortiGate also sends a configuration checksum to confirm synchronization as a part of keepalive.
NEW QUESTION 62
An administrator wants to delete an address object that is currently referenced in a firewall policy. Which one of the following statements is true?
- A. FortiManager will not allow the administrator to delete a referenced address object
- B. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
- C. FortiManager will disable the status of the referenced firewall policy
- D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy
Answer: B
NEW QUESTION 63
View the following exhibit.
Based on the configuration setting, which one of the following statements is true?
- A. The setting allows automatic updates to the policy package configuration for a managed device
- B. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
- C. The setting enables the ADOMs feature on FortiManager
- D. The setting disables concurrent ADOM access and adds ADOM locking
Answer: B
NEW QUESTION 64
Which two items are included in the FortiManager backup? (Choose two.)
- A. Global database
- B. FortiGuard database
- C. Logs
- D. All devices
Answer: A,D
Explanation:
Reference:
https://kb.fortinet.com/kb/viewContent.do?externalId=FD34549
NEW QUESTION 65
As a result of enabling FortiAnalyzer features on FortiManager, which of the following statements is true?
- A. FortiManager will reboot
- B. FortiManager can be used only as a logging device.
- C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
- D. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
Answer: A
Explanation:
When the FortiAnalyzer feature set is enabled on FortiManager, FortiManager will reboot.
NEW QUESTION 66
Refer to the exhibit.
Which two statements about the output are true? (Choose two.)
- A. The latest history for the managed FortiGate does not match with the device-level database
- B. Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed
- C. The latest revision history for the managed FortiGate does match with the FortiGate running configuration
- D. Configuration changes directly made on the FortiGate have been automatically updated to device-level database
Answer: A,C
Explanation:
STATUS: dev-db: modified; conf: in sync; cond: pending; dm: retrieved; conn: up
- dev-db: modified - This is the device setting status which indicates that configuration changes were made on FortiManager.
- conf: in sync - This is the sync status which shows that the latest revision history is in sync with Fortigate's configuration.
- cond: pending - This is the configuration status which says that configuration changes need to be installed.
Most probably a retrieve was done in the past (dm: retrieved) updating the revision history DB (conf: in sync) and FortiManager device level DB, now there is a new modification on FortiManager device level DB (dev-db: modified) which wasn't installed to FortiGate (cond: pending), hence; revision history DB is not aware of that modification and doesn't match device DB.
Conclusion:
- Revision DB does match FortiGate.
- No changes were installed to FortiGate yet.
- Device DB doesn't match Revision DB.
- No changes were done on FortiGate (auto-update) but configuration was retrieved instead After an Auto-Update or Retrieve:
device database = latest revision = FGT
Then after a manual change on FMG end (but no install yet):
latest revision = FGT (still) but now device database has been modified (is different).
After reverting to a previous revision in revision history:
device database = reverted revision != FGT
NEW QUESTION 67
View the following exhibit:
Which of the following statements are true if the scripts is executed using Remote FortiGate Directly (via CLI) option? (Choose two.)
- A. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
- B. You must install these changes using Install Wizard
- C. FortiGate will auto-update the FortiManager's device-level database.
- D. FortiManager will create a new revision history.
Answer: C,D
NEW QUESTION 68
......
Pass Fortinet NSE 5 NSE5_FMG-6.2 Exam With 85 Questions: https://www.fast2test.com/NSE5_FMG-6.2-premium-file.html