NSE5_FMG-6.4 Fortinet Exam Questions and Free Practice Test

Question 7

- (Exam Topic 1)
View the following exhibit, which shows the Download Import Report:
NSE5_FMG-6.4 dumps exhibit
Why it is failing to import firewall policy ID 2?

A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

Correct Answer:A
FortiManager_6.4_Study_Guide-Online – page 331 & 332

Question 8

- (Exam Topic 1)
Refer to the exhibits.
Exhibit one.
NSE5_FMG-6.4 dumps exhibit
Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.
What can be the main reason for these unset commands?

A. The DNS addresses in the default system settings are the same as the Training system template

B. The Training system template has other default settings

C. The ADOM is locked by another administrator

D. The Training system template does not have assigned devices

Correct Answer:B

Question 9

- (Exam Topic 1)
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

B. When a new policy package is created, the administrator needs to reapply the global policy package toADOM1.

C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

Correct Answer:D
Reference:
https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy and Objects/08

Question 10

- (Exam Topic 1)
View the following exhibit:
NSE5_FMG-6.4 dumps exhibit
How will FortiManager try to get updates for antivirus and IPS?

A. From the list of configured override servers with ability to fall back to public FDN servers

B. From the configured override server list only

C. From the default server fdsl.fortinet.com

D. From public FDNI server with highest index number only

Correct Answer:A
Reference:
https://community.fortinet.com/t5/Fortinet-Forum/Clarification-of-FortiManager-s-quot-Server-Override-Mode

Question 11

- (Exam Topic 2)
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

A. When a new policy package is created, it automatically assigns the global policies to the new package.

B. When a new policy package is created, you need to assign the global policy package from the global ADOM.

C. When a new policy package is created, you need to reapply the global policy package to the ADOM.

D. When a new policy package is created, you can select the option to assign the global policies to the new package.

Correct Answer:A
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).

Question 12

- (Exam Topic 1)
An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?

A. Set to workflow and use the ADOM locking feature

B. Set to read/write and use the policy locking feature

C. Set to normal and use the policy locking feature

D. Set to disable and use the policy locking feature

Correct Answer:A
Reference:
https://help.fortinet.com/fmgr/50hlp/52/5-2-0/FMG_520_Online_Help/200_What's-New.03.03.html

START NSE5_FMG-6.4 EXAM