NSE5_FMG-6.4 Exam Training Practice Tests (Fortinet NSE 5

Question 1

An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?

A. By an Asterisk (*) at the end of the device name B. By an at symbol (@) at the end of the device name C. By a dollar symbol ($) at the end of the device name D. By a

Correct Answer: A

Question 2

What are two outcomes of ADOM revisions? (Choose two.)

A. ADOM revisions can save the current state of all policy packages and objects for an ADOM B. ADOM revisions can significantly increase the size of the configuration backups. C. ADOM revisions can create System Checkpoints for the FortiManager configuration D. ADOM revisions can save the current size of the whole ADOM

Correct Answer: A,B

Question 3

Which two settings must be configured for SD-WAN Central Management? (Choose two.)

A. When you configure an SD-WAN, you must specify at least two member interfaces. B. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies. C. SD-WAN must be enabled on per-ADOM basis D. You can create multiple SD-WAN interfaces per VDOM

Correct Answer: A,C

Question 4

What is the purpose of the Policy Check feature on FortiManager?

A. To find and provide recommendation to combine multiple separate policy packages into one common policy package B. To find and merge duplicate policies in the policy package C. To find and provide recommendation for optimizing policies in a policy package D. To find and delete disabled firewall policies in the policy package

Correct Answer: C

Question 5

Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

A. The administrator profile does not have full access privileges like the Super_User profile. B. FortiAnalyzer features are not enabled on FortiManager. C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces. D. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.

Correct Answer: A,B

Question 6

Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. 192.168.0.1/24 B. It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values. C. 10.200.1.0/24 D. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 5 - FortiManager 6.4 - NSE5_FMG-6.4 Exam Practice Test