Fortinet NSE5_FMG-5.4 Exam Questions

Question 6 of 56

Which of the following conditions trigger FortiManager to create a new revision history? (Choose two.)

When FortiManager installs device-level changes to a managed device.

When configuration revision is reverted to previous revision in the revision history.

When changes to device-level database is made on FortiManager.

When FortiManager is auto-updated with configuration changes made directly on a managed device.

Correct Answer: A, C

Question 7 of 56

Which of the following statements are true regarding an FGFM keepalive message? (Choose two.)

It includes the configuration checksum of FortiGate.

The keepalive interval for keepalive messages is configured on FortiGate.

It is sent only by FortiGate.

It is used between FortiManager HA cluster members to make sure cluster members are in sync.

Correct Answer: B, D

Question 8 of 56

An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.

Changes to the AP's state must be performed directly on the managed FortiGate.

Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

Correct Answer: D

Question 9 of 56

An administrator has assigned a global policy package to custom ADOM1. What will happen if the administrator tries to create a new policy package in custom
ADOM1?

When a new policy package is created, you need to reapply the global policy package to the ADOM.

When creating a new policy package, can select the option to assign the global policies to the new package.

When a new policy package is created, it automatically assigns the global policies to the new package.

When a new policy package is created, you must assign the global policy package from the global ADOM.

Correct Answer: B

Question 10 of 56

View the following exhibit:
Exam NSE5_FMG-5.4: Question 10 - Image 1

An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student.
However, Trainer is unable to approve the workflow session. What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

Trainer must close Student's workflow session before approving the request.

Trainer does not have full rights over this ADOM.

Trainer is not a part of workflow approval group.

Student, who submitted the workflow session, must first self-approve the request.

Correct Answer: C