Fortinet NSE 5 – FortiManager 6.0

Here you have the best Fortinet NSE5_FMG-6.0 practice exam questions

You have 35 total questions to study from
Each page has 5 questions, making a total of 7 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on November 15, 2024

Question 1 of 35

Which of the following conditions trigger FortiManager to create a new revision history? (Choose two.)

When configuration revision is reverted to previous revision in the revision history

When FortiManager installs device-level changes to a managed device

When FortiManager is auto-updated with configuration changes made directly on a managed device

When changes to device-level database is made on FortiManager

Correct Answer: B, C

FortiManager creates a new revision history when it installs device-level changes to a managed device and when it is auto-updated with configuration changes made directly on a managed device. This ensures that any significant changes to device configurations are logged and can be tracked for future reference or troubleshooting. Installing changes directly impacts the managed device's configuration, requiring a new revision to capture this state. Auto-updates from direct changes on the device also need to be tracked to maintain an accurate configuration history.

Question 2 of 35

What does the diagnose dvm check-integrity command do? (Choose two.)

Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

Verifies and corrects unregistered, registered, and deleted device states

Verifies and corrects database schemas in all object tables

Verifies and corrects duplicate VDOM entries

Correct Answer: B, C

The diagnose dvm check-integrity command is used to verify and correct various states and configurations within the system. This command specifically verifies and corrects unregistered, registered, and deleted device states, ensuring the integrity of the device management system. Additionally, it verifies and corrects database schemas in all object tables, maintaining the correctness and consistency of the database. These functionalities align with the core purpose of the command, making options B and C the correct answers.

Question 3 of 35

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

Correct Answer: D

When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package. This ensures that any global policies established by the administrator are consistently applied to new policy packages within the ADOM, simplifying management and maintaining uniform policy enforcement.

Question 4 of 35

View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

FortiManager updated the object ALL using FortiGate's value in its database

FortiManager updated the object ALL using FortiManager's value in its database

FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

FortiManager installed the object ALL with the updated value.

Correct Answer: A

The message "firewall service custom",SUCCESS,"(name=ALL,oid=863,update previous object)" indicates that FortiManager updated the object named ALL. The phrase "update previous object" suggests that FortiManager has synchronized its database with the value of the object from FortiGate's configuration. Therefore, the true statement is that FortiManager updated the object ALL using FortiGate's value in its database.

Question 5 of 35

View the following exhibit:

How will FortiManager try to get updates for antivirus and IPS?

From the list of configured override servers with ability to fall back to public FDN servers

From the configured override server list only

From the default server fdsl.fortinet.com

From public FDNI server with highest index number only

Correct Answer: A

FortiManager attempts to get updates for antivirus and IPS from the list of configured override servers first, and if it fails, it can fall back to public FortiGuard Distribution Network (FDN) servers. The exhibit shows that the server override mode is set to 'Loose,' which allows fallback to default public servers if the override servers are not reachable. This mechanism ensures greater flexibility and reliability in maintaining up-to-date security definitions.