NSE5_FMG-5.4 Online Practice Questions and Answers

View the following exhibit:

Which of the following statements are true if both FortiManager and FortiGate are behind the NAT devices? (Choose two.)

A. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

B. If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

C. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

D. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

View the following exhibit:

An administrator logs in to the FortiManager GUI and sees these panes. Which of the following can be the reason the FortiAnalyzer feature panes don't appear? (Choose two.)

A. The administrator IP address is not a part of the trusted hosts configured on FortiManager's interfaces.

B. FortiAnalyzer features are not enabled on FortiManager.

C. The administrator logged in using unsecure protocol HTTP, so the view is restricted.

D. The administrator profile does not have full access privileges like the Super_User profile

View the following exhibit:

An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?

A. port1 on FortiGate and WAN on FortiManager

B. port1 on both FortiGate and FortiManager

C. WAN zone on FortiGate and WAN zone on FortiManager

D. WAN zone on FortiGate and WAN interface on FortiManager

Which of the following statements are true regarding an FGFM keepalive message? (Choose two.)

A. It includes the configuration checksum of FortiGate.

B. The keepalive interval for keepalive messages is configured on FortiGate.

C. It is sent only by FortiGate.

D. It is used between FortiManager HA cluster members to make sure cluster members are in sync.

How are the points calculated when using FortiMeter to deploy FortiOS-VM? (Choose two.)

A. Based on the number of sessions on the mgmt interface of FortiOS-VM.

B. Based on the FortiGuard service option enabled for FortiOS-VM.

C. Based on the traffic usage on port1 and port2 on FortiOS-VM.

D. Based on the amount of traffic (per GB) passing through the FortiOS-VM.

Which of the following statements are true regarding ADOM revisions? (Choose two.)

A. ADOM revisions can save the current state of all policy packages and objects for an ADOM.

B. ADOM revisions can significantly increase the size of the configuration backups.

C. ADOM revisions can create System Checkpoints for the FortiManager configuration.

D. ADOM revisions can save the current state of the whole ADOM.

What does the diagnose cdb check policy-assignment command do?

A. Fixes incorrect ADOM-level object references based on the firewall policies.

B. Internally upgrades existing ADOMs to the same ADOM version in order to clean up and correct the ADOM syntax.

C. Verifies and checks dynamic mappings, and removes invalid dynamic mappings.

D. Verifies and corrects global ADOM policy package assignments that have been disassociated from an ADOM.

An administrator is replacing a device on FortiManager by running the following command: execute device replace sn . What device name and serial number must the administrator use?

A. Device name of the original device and serial number of the replacement device.

B. Device name and serial number of the replacement device.

C. Both device name and serial number of the original device. The administrator must update the hostname manually on the replacement device to match the device name currently on FortiManager.

D. Device name of the replacement device and serial number of the original device.