NSE5_FMG-6.2問題集、Fortinet実際の試験問題

質問 1

You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

A. Any unused objects from a previous ADOM are moved to the new ADOM automatically

B. Any pending device settings will be installed automatically

C. Policy packages will be imported into the new ADOM automatically

D. The shared policy package will not be moved to the new ADOM

正解: C

質問 2

When installation is performed from the FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

A. FortiManager will revert and install a previous configuration revision on the managed FortiGate.

B. FortiGate will reject the CLI commands that will cause the tunnel to go down.

C. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

D. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which ports are commonly used by FortiManager? (Choose two.)

A. TCP 541 for remote management of a FortiGate unit.

B. TCP 5199 HA heartbeat or synchronization (FortiManager HA cluster).

C. TCP 514 for remote management of a FortiGate unit.

D. TCP 703 HA heartbeat or synchronization (FortiManager HA cluster).

正解: C,D

質問 4

What does a policy package status of Conflict indicate?

A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.

B. The policy package does not have a FortiGate as the installation target.

C. The policy configuration has never been imported after a device was registered on FortiManager.

D. The policy package configuration has been changed on both FortiManager and the managed device independently.

正解: A

質問 5

View the following exhibit. An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package.
When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

B. Local-FortiGate will automatically choose an IP Network based on its network interface settings.

C. 192.168.0.1/24

D. 10.0.1.0/24

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 6

When a FortiManager HA primary device fails, which two statements are correct for promoting a secondary device to the primary role? (Choose two)

A. All other secondary devices must be reconfigured to point to new primary device.

B. The FortiManager HA suports IP takeover where an HA state transition does not require manual intervention.

C. Reboot is required when promoting from secondary to primary.

D. Must manually reconfigure one of the secondary devices to become the master device.

正解: A,D

質問 7

An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.
How can the administrator unlock the ADOM?

A. Log in using the same administrator account to unlock the ADOM.

B. Delete the previous admin session manually through the FortiManager GUI or CLI.

C. Restore the configuration from a previous backup.

D. Log in as Super_User in order to unlock the ADOM.

正解: A

質問 8

View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

B. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

C. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 9

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

A. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

B. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

C. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

D. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

正解: C

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 5 - FortiManager 6.2 - NSE5_FMG-6.2 模擬練習