[Q26-Q42] Sep-2022 Realistic NSE5_FMG-6.4 Accurate & Verified Answers As Experienced in the Actual Test!

NEW QUESTION 26
What does the diagnose dvm check-integrity command do? (Choose two.)

Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

Verifies and corrects unregistered, registered, and deleted device states

Verifies and corrects database schemas in all object tables

Verifies and corrects duplicate VDOM entries

NEW QUESTION 27
Refer to the exhibit.

You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)

It will not create a new revision in the revision history

It installs device-level changes to FortiGate without launching the Install Wizard

It cannot be canceled once initiated and changes will be installed on the managed device

It provides the option to preview configuration changes prior to installing them

NEW QUESTION 28
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?

FortiManager will not allow the administrator to delete a referenced address object

FortiManager will disable the status of the referenced firewall policy

FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

FortiManager will replace the deleted address object with all address object in the referenced firewall policy

NEW QUESTION 29
An administrator would like to create an SD-WAN using central management in the Training ADOM.
To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

Specify a gateway address when you create a default SD-WAN static route

Enable SD-WAN central management in the Training ADOM

Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings

Remove all the interface references such as routes or policies that will be a part of SD-WAN member interfaces

NEW QUESTION 30
Which two statements regarding device management on FortiManager are true? (Choose two.)

FortiGate devices in HA cluster devices are counted as a single device.

FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

The maximum number of managed devices for each ADOM is 500.

NEW QUESTION 31
View the following exhibit.

Which statement is true regarding this failed installation log?

Policy ID 2 is installed without a source address

Policy ID 2 will not be installed

Policy ID 2 is installed in disabled state

Policy ID 2 is installed without a source device

NEW QUESTION 32
What is the purpose of ADOM revisions?

To create System Checkpoints for the FortiManager configuration.

To save the current state of the whole ADOM.

To save the current state of all policy packages and objects for an ADOM.

To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

NEW QUESTION 33
What does a policy package status of Modified indicate?

FortiManager is unable to determine the policy package status

The policy package was never imported after a device was registered on FortiManager

The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

NEW QUESTION 34
An administrator is replacing a device on FortiManager by running the following command:
execute device replace sn <devname> <serialnum>.
What device name and serial number must the administrator use?

Device name and serial number of the original device.

Device name and serial number of the replacement device.

Device name of the replacement device and serial number of the original device.

Device name of the original device and serial number of the replacement device.

NEW QUESTION 35
An administrator’s PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.
How can the administrator unlock the ADOM?

Restore the configuration from a previous backup.

Log in as Super_User in order to unlock the ADOM.

Log in using the same administrator account to unlock the ADOM.

Delete the previous admin session manually through the FortiManager GUI or CLI.

NEW QUESTION 36
Which configuration setting for FortiGate is part of a device-level database on FortiManager?

VIP and IP Pools

Firewall policies

Security profiles

Routing

NEW QUESTION 37
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?

port2

virtual-wan-link

port1

auto-discovery

NEW QUESTION 38
What is the purpose of the Policy Check feature on FortiManager?

To find and provide recommendation to combine multiple separate policy packages into one common policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and delete disabled firewall policies in the policy package

NEW QUESTION 39
Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?

It allows FortiGate to unset central management settings.

It allows FortiGate to reboot and recover the previous configuration from its configuration file.

It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

It allows FortiGate to reboot and restore a previously working firmware image.

NEW QUESTION 40
Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

192.168.0.1/24

10.200.1.0/24

It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

NEW QUESTION 41
In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

NEW QUESTION 42
View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?