Verified NSE5_FMG-6.4 Dumps Q&As – NSE5_FMG-6.4 Test Engine with Correct Answers [Q10-Q26]

4/5 - (1 vote)

Verified NSE5_FMG-6.4 Dumps Q&As – NSE5_FMG-6.4 Test Engine with Correct Answers

Pass Your NSE5_FMG-6.4 Dumps as PDF Updated on 2022 With 60 Questions

Fortinet NSE5_FMG-6.4 Exam Syllabus Topics:

Topic	Details
Topic 1	Diagnose issues using revision history Configure administrative access
Topic 2	Manage registered devices Configure security fabric using central management
Topic 3	Create and install policy packages Configure FortiManager as local FDS
Topic 4	Troubleshoot import and installation issues between FortiManager and FortiGate Configure SD-WAN using central management
Topic 5	Install device level configuration changes Perform initial configuration
Topic 6	Configure administrative domains (ADOMs) Troubleshoot device and ADOM databases
Topic 7	Configure FortiManager HA Customize and generate reports

NO.10 Which two settings must be configured for SD-WAN Central Management? (Choose two.)

SD-WAN must be enabled on per-ADOM basis

You can create multiple SD-WAN interfaces per VDOM

When you configure an SD-WAN, you must specify at least two member interfaces.

The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

NO.11 An administrator run the reload failure command: diagnose test deploymanager reload config
<deviceid> on FortiManager. What does this command do?

It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.

It installs the latest configuration on the specified FortiGate and update the revision history database.

It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.

It installs the provisioning template configuration on the specified FortiGate.

NO.12 Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

It disables concurrent read-write access to an ADOM.

It allows the same administrator to lock more than one ADOM at the same time.

It is used to validate administrator login attempts through external servers.

NO.13 An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate.
In which database will the configuration be saved?

Device-level database

Revision history database

ADOM-level database

Configuration-level database

https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942

NO.14 Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?

It allows FortiGate to unset central management settings.

It allows FortiGate to reboot and recover the previous configuration from its configuration file.

It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

It allows FortiGate to reboot and restore a previously working firmware image.

NO.15 Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)

Backs up all devices and the FortiGuard database.

Does not back up firmware images saved on FortiManager

Supports FTP, SCP, and SFTP

Can be configured from the CLI and GUI

NO.16 What is the purpose of the Policy Check feature on FortiManager?

To find and provide recommendation to combine multiple separate policy packages into one common policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and delete disabled firewall policies in the policy package

NO.17 Which configuration setting for FortiGate is part of a device-level database on FortiManager?

VIP and IP Pools

Firewall policies

Security profiles

Routing

The FortiManager stores the FortiGate configuration details in two distinct databases. The device-level database includes configuration details related to device-level settings, such as interfaces, DNS, routing, and more. The ADOM-level database includes configuration details related to firewall policies, objects, and security profiles.

NO.18 Refer to the following exhibit:

Which of the following statements are true based on this configuration? (Choose two.)

The same administrator can lock more than one ADOM at the same time

Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out

Unlocking an ADOM will submit configuration changes automatically to the approval administrator

Unlocking an ADOM will install configuration automatically on managed devices

NO.19 View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

FortiManager updated the object ALL using FortiGate’s value in its database

FortiManager updated the object ALL using FortiManager’s value in its database

FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

FortiManager installed the object ALL with the updated value.

NO.20 Which two statements regarding device management on FortiManager are true? (Choose two.)

FortiGate devices in HA cluster devices are counted as a single device.

FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

The maximum number of managed devices for each ADOM is 500.

NO.21 What will be the result of reverting to a previous revision version in the revision history?

It will install configuration changes to managed device automatically

It will tag the device settings status as Auto-Update

It will generate a new version ID and remove all other revision history versions

It will modify the device-level database

NO.22 An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?

Set to workflow and use the ADOM locking feature

Set to read/write and use the policy locking feature

Set to normal and use the policy locking feature

Set to disable and use the policy locking feature

NO.23 View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

10.0.1.0/24

It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

192.168.0.1/24

Local-FortiGate will automatically choose an IP Network based on its network interface settings.

NO.24 View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

Once initiated, the install process cannot be canceled and changes will be installed on the managed device

Will not create new revision in the revision history

Installs device-level changes to FortiGate without launching the Install Wizard

Provides the option to preview configuration changes prior to installing them

NO.25 View the following exhibit.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

Fortimanager can discover FortiGate through a NATed FortiGate IP address. If a FortiManager NATed IP address is configured on FortiGate, then FortiGate can announce itself to FortiManager. FortiManager will not attempt to re-establish the FGFM tunnel to the FortiGate NATed IP address, if the FGFM tunnel is interrupted. Just like it was in the NATed FortiManager scenario, the FortiManager NATed IP address in this scenario is not configured under FortiGate central management configuration.

NO.26 Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

When configuration revision is reverted to previous revision in the revision history

When FortiManager installs device-level changes to a managed device

When FortiManager is auto-updated with configuration changes made directly on a managed device

When changes to device-level database is made on FortiManager

Loading …

Pass Fortinet NSE5_FMG-6.4 Exam Info and Free Practice Test: https://www.prepawaypdf.com/Fortinet/NSE5_FMG-6.4-practice-exam-dumps.html

[May 16, 2022] Dumps Collection NSE5_FMG-6.4 Test Engine Dumps Training With 60 Questions [Q33-Q55]
Real NSE4_FGT-6.4 are Uploaded by PrepAwayPDF provide 2022 Latest NSE4_FGT-6.4 Practice Tests Dumps [Q13-Q35]

Fortinet NSE5_FMG-6.4 Exam Syllabus Topics:

Related posts:

admin

You might also like

Leave a Reply Cancel reply