Fortinet NSE5_FMG-6.0 Exam Dumps

Question 6 of 35

View the following exhibit.

What of the following statements are true regarding the output? (Choose two.)

The latest revision history for the managed FortiGate does match with the FortiGate running configuration

Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

The latest history for the managed FortiGate does not match with the device-level database

Configuration changes directly made on the FortiGate have been automatically updated to device-level database

Correct Answer: A, C

The output indicates that the device is in sync with its ADOM, but the current database has been modified and is awaiting confirmation. This suggests that the latest revision history for the managed FortiGate does not match the device-level database, which supports options A and C. Configuration changes made on the FortiGate have not yet been updated to the device-level database.

Question 7 of 35

An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.

Which interface must the administrator select in the static route device drop-down list?

port2

virtual-wan-link

port1

auto-discovery

Correct Answer: B

When configuring an SD-WAN default static route in the FortiManager GUI, the appropriate interface to select is the 'virtual-wan-link'. This is because 'virtual-wan-link' is an aggregated interface that represents all the individual WAN links that are part of the SD-WAN. By selecting this interface, the traffic can be dynamically routed across both port1 and port2 based on the SD-WAN rules and policies, ensuring optimal path selection and load balancing.

Question 8 of 35

View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

Correct Answer: A

The failure to import firewall policy ID 2 is due to the address object used in this policy already existing in the ADOM database with 'any' as the interface association. This conflicts with the interface association of the address object locally configured on the FortiGate. The error message specifically mentions a contradiction detail related to 'any<-port6' interface binding failure, which aligns with this explanation.

Question 9 of 35

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Correct Answer: D

In a FortiManager High Availability (HA) setup, the transition of roles from a failed primary device to a secondary device is designed to be transparent to administrators. FortiManager handles the promotion of a secondary device to the primary role automatically and does not require manual intervention or reconfiguration of other devices. This ensures continuous management and operation without the need for manual adjustments.

Question 10 of 35

An administrator run the reload failure command: diagnose test deploymanager reload config on FortiManager. What does this command do?

It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.

It installs the latest configuration on the specified FortiGate and update the revision history database.

It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.

It installs the provisioning template configuration on the specified FortiGate.

Correct Answer: C

The command 'diagnose test deploymanager reload config <deviceid>' on FortiManager compares and provides differences between the configuration on FortiManager and the current running configuration of the specified FortiGate. This helps administrators identify discrepancies and ensure consistency between the stored and running configurations.