100% Guaranteed Results NSE5_FMG-6.2 Unlimited 85 Questions [2021]
NSE5_FMG-6.2 Dumps PDF - Want To Pass NSE5_FMG-6.2 Fast
NEW QUESTION 13
Refer to the exhibit. You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)
- A. It provides the option to preview configuration changes prior to installing them
- B. It installs device-level changes to FortiGate without launching the Install Wizard
- C. It will not create a new revision in the revision history
- D. It cannot be canceled once initiated and changes will be installed on the managed device
Answer: B,D
NEW QUESTION 14
Which of the following conditions trigger FortiManager to create a new revision history? (Choose two.)
- A. When changes to device-level database is made on FortiManager
- B. When FortiManager is auto-updated with configuration changes made directly on a managed device
- C. When configuration revision is reverted to previous revision in the revision history
- D. When FortiManager installs device-level changes to a managed device
Answer: B,D
NEW QUESTION 15
As a result of enabling FortiAnalyzer features on FortiManager, which of the following statements is true?
- A. FortiManager will reboot
- B. FortiManager can be used only as a logging device.
- C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
- D. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
Answer: A
Explanation:
When the FortiAnalyzer feature set is enabled on FortiManager, FortiManager will reboot.
NEW QUESTION 16
An administrator wants to delete an address object that is currently referenced in a firewall policy.
Which one of the following statements is true?
- A. FortiManager will not allow the administrator to delete a referenced address object
- B. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
- C. FortiManager will disable the status of the referenced firewall policy
- D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy
Answer: B
Explanation:
On FortiManager, it is possible to delete a used object. FortiManager will display a warning message stating that the object is currently used by other firewall policies or objects. If you delete a used object, FortiManager will replace it with a none object. The none object is equal to null, which means any traffic that meets that firewall policy will be blocked.
NEW QUESTION 17
Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)
- A. Can be configured from the CLI and GUI
- B. Supports FTP, SCP, and SFTP
- C. Backs up all devices and the FortiGuard database.
- D. Does not back up firmware images saved on FortiManager
Answer: B,D
Explanation:
The backup contains everything except the logs, FortiGuard cache, and firmware images saved on FortiManager.
You can also use the CLI to schedule backups at regular intervals.
NEW QUESTION 18
View the following exhibit.
Which one of the following statements is true regarding the object named ALL?
- A. FortiManager updated the object ALL using FortiGate's value in its database
- B. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
- C. FortiManager updated the object ALL using FortiManager's value in its database
- D. FortiManager installed the object ALL with the updated value.
Answer: A
NEW QUESTION 19
View the following exhibit.
Which statement is true regarding this failed installation log?
- A. Policy ID 2 will not be installed
- B. Policy ID 2 is installed in disabled state
- C. Policy ID 2 is installed without a source device
- D. Policy ID 2 is installed without a source address
Answer: C
NEW QUESTION 20
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?
- A. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
- B. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
- C. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.
- D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
Answer: B
Explanation:
https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/0800_Managing%20policy%20packages/1200_Assign
%20a%20global%20policy%20package.htm
NEW QUESTION 21
Refer to the exhibits.
Exhibit one.
Exhibit two.
An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.
What can be the main reason for these unset commands?
- A. The DNS addresses in the default system settings are the same as the Training system template
- B. The Training system template does not have assigned devices
- C. The ADOM is locked by another administrator
- D. The Training system template has other default settings
Answer: D
NEW QUESTION 22
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices.
The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?
- A. The FortiGate will be added automatically to the default ADOM named FortiGate.
- B. By default, the unregistered FortiGate will appear in the root ADOM.
- C. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard
- D. The FortiGate will be automatically added to the Training ADOM.
Answer: B
NEW QUESTION 23
When statement correct compares FortiManager physical and virtual appliances?
- A. Physical and virtual FortiManager appliances have an unrestricted daily logging rate.
- B. Physical and virtual FortiManager appliances use licenses to increase managed device and storage capacity limits.
- C. Physical and virtual FortiManager appliances use model types and licenses respectively, to differentiate managed device and storage capacity limits.
- D. Physical and virtual FortiManager appliances may manage unlimited devices and have unrestricted storage.
Answer: C
NEW QUESTION 24
View the following exhibit.
Which one of the following statements is true regarding installation targets in use Install On column?
- A. Policy seq=3 will be not installed on any managed device
- B. The Install On column value represents successful installation on the managed devices
- C. Policy seq=3 will be installed on the Trainer[NAT] VDOM only
- D. Policy seq=3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
Answer: D
NEW QUESTION 25
Refer to the exhibit. An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?
- A. It allows FortiGate to reboot and restore a previously working firmware image.
- B. It allows FortiGate to unset central management settings.
- C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.
- D. It allows FortiGate to reboot and recover the previous configuration from its configuration file.
Answer: D
NEW QUESTION 26
Which of the following statements are true regarding ADOM revisions? (Choose two.)
- A. ADOM revisions can significantly increase the size of the configuration backups.
- B. ADOM revisions can create System Checkpoints for the FortiManager configuration
- C. ADOM revisions can save the current size of the whole ADOM
- D. ADOM revisions can save the current state of all policy packages and objects for an ADOM
Answer: A,D
NEW QUESTION 27
View the following exhibit.
When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)
- A. Will not create new revision in the revision history
- B. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
- C. Installs device-level changes to FortiGate without launching the Install Wizard
- D. Provides the option to preview configuration changes prior to installing them
Answer: B,C
NEW QUESTION 28
An administrator run the reload failure command: diagnose test deploymanager reload config
<deviceid> on FortiManager. What does this command do?
- A. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
- B. It installs the provisioning template configuration on the specified FortiGate.
- C. It installs the latest configuration on the specified FortiGate and update the revision history database.
- D. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
Answer: D
NEW QUESTION 29
View the following exhibit.
Based on the configuration setting, which one of the following statements is true?
- A. The setting allows automatic updates to the policy package configuration for a managed device
- B. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
- C. The setting enables the ADOMs feature on FortiManager
- D. The setting disables concurrent ADOM access and adds ADOM locking
Answer: B
NEW QUESTION 30
View the following exhibit. Which statement is true regarding this failed installation log?
- A. Policy ID 2 will not be installed
- B. Policy ID 2 is installed in disabled state
- C. Policy ID 2 is installed without a source device
- D. Policy ID 2 is installed without a source address
Answer: C
Explanation:
Confirmed on FortiGate using CLI cmds above. The policy created above will be created and shows up in the "IPv4 Policy" section (so it is enabled), but does not have a device listed as the source device.
NEW QUESTION 31
Which two items are included in the FortiManager backup? (Choose two.)
- A. Global database
- B. FortiGuard database
- C. Logs
- D. All devices
Answer: A,D
Explanation:
Reference:
https://kb.fortinet.com/kb/viewContent.do?externalId=FD34549
NEW QUESTION 32
Refer to the exhibit.
Which two statements about the output are true? (Choose two.)
- A. The latest history for the managed FortiGate does not match with the device-level database
- B. Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed
- C. The latest revision history for the managed FortiGate does match with the FortiGate running configuration
- D. Configuration changes directly made on the FortiGate have been automatically updated to device-level database
Answer: A,C
Explanation:
STATUS: dev-db: modified; conf: in sync; cond: pending; dm: retrieved; conn: up
- dev-db: modified - This is the device setting status which indicates that configuration changes were made on FortiManager.
- conf: in sync - This is the sync status which shows that the latest revision history is in sync with Fortigate's configuration.
- cond: pending - This is the configuration status which says that configuration changes need to be installed.
Most probably a retrieve was done in the past (dm: retrieved) updating the revision history DB (conf: in sync) and FortiManager device level DB, now there is a new modification on FortiManager device level DB (dev-db: modified) which wasn't installed to FortiGate (cond: pending), hence; revision history DB is not aware of that modification and doesn't match device DB.
Conclusion:
- Revision DB does match FortiGate.
- No changes were installed to FortiGate yet.
- Device DB doesn't match Revision DB.
- No changes were done on FortiGate (auto-update) but configuration was retrieved instead After an Auto-Update or Retrieve:
device database = latest revision = FGT
Then after a manual change on FMG end (but no install yet):
latest revision = FGT (still) but now device database has been modified (is different).
After reverting to a previous revision in revision history:
device database = reverted revision != FGT
NEW QUESTION 33
What does a policy package status of Modified indicate?
- A. Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager
- B. Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
- C. FortiManager is unable to determine the policy package status
- D. The policy package was never imported after a device was registered on FortiManager
Answer: B
NEW QUESTION 34
Refer to the exhibit. Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
- A. It disables concurrent read-write access to an ADOM.
- B. It allows the same administrator to lock more than one ADOM at the same time.
- C. It is used to validate administrator login attempts through external servers.
- D. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.
Answer: A,B
NEW QUESTION 35
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?
- A. The FortiGate will be added automatically to the default ADOM named FortiGate.
- B. By default, the unregistered FortiGate will appear in the root ADOM.
- C. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard
- D. The FortiGate will be automatically added to the Training ADOM.
Answer: B
NEW QUESTION 36
......
Updated Verified NSE5_FMG-6.2 Q&As - Pass Guarantee: https://www.bootcamppdf.com/NSE5_FMG-6.2_exam-dumps.html