[Jul 17, 2022] Lesson Brilliant PDF for the NSE5_FMG-6.4 Tests Free Updated Today [Q36-Q60] : Top Exam Collection : http://blog.topexamcollection.com

NR. 36 An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?

port2

virtual-wan-link

port1

auto-discovery

NR. 37 Welche beiden Einstellungen müssen für SD-WAN Central Management konfiguriert werden? (Wählen Sie zwei.)

SD-WAN muss auf pro-ADOM-Basis aktiviert werden

Sie können mehrere SD-WAN-Schnittstellen pro VDOM erstellen

Wenn Sie ein SD-WAN konfigurieren, müssen Sie mindestens zwei Teilnehmerschnittstellen angeben.

Der erste Schritt bei der Erstellung eines SD-WAN mit FortiManager besteht darin, zwei SD-WAN-Firewall-Richtlinien zu erstellen.

NR. 38 When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

FortiManager will revert and install a previous configuration revision on the managed FortiGate.

FortiGate will reject the CLI commands that will cause the tunnel to go down.

FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

NR. 39 Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

When configuration revision is reverted to previous revision in the revision history

When FortiManager installs device-level changes to a managed device

When FortiManager is auto-updated with configuration changes made directly on a managed device

When changes to device-level database is made on FortiManager

NR. 40 Which three settings are the factory default settings on FortiManager? (Choose three.)

Username is admin

Password is fortinet

FortiAnalyzer features are disabled

Reports and Event Monitor panes are enabled

port1 interface IP address is 192.168.1.99/24

NR. 41 Sehen Sie sich das folgende Exponat an.

Was können Sie angesichts der in der Abbildung gezeigten Konfigurationen aus den Installationszielen in der Spalte "Installieren auf" schließen?

Der Wert in der Spalte Installieren ein" steht für eine erfolgreiche Installation auf den verwalteten Geräten.

Die Richtlinie seq#3 wird auf allen verwalteten Geräten und VDOMs installiert, die unter Installationsziele aufgeführt sind.

Die Richtlinie seq#3 wird nur auf dem VDOM Trainer[NAT] installiert.

Die Richtlinie seq#3 wird auf keinem verwalteten Gerät installiert

NO.42 An administrator’s PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.
How can the administrator unlock the ADOM?

Restore the configuration from a previous backup.

Log in as Super_User in order to unlock the ADOM.

Log in using the same administrator account to unlock the ADOM.

Delete the previous admin session manually through the FortiManager GUI or CLI.

NO.43 An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

Trainer is not a part of workflow approval group

Trainer does not have full rights over this ADOM

Trainer must close Student’s workflow session before approving the request

Student, who submitted the workflow session, must first self-approve the request

NR. 44 Siehe dazu die Abbildung.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

The administrator logged in using the unsecure protocol HTTP, so the view is restricted.

The administrator profile does not have full access privileges like the Super_User profile.

The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.

FortiAnalyzer features are not enabled on FortiManager.

NR. 45 Siehe dazu die Abbildung.

Which two statements about the output are true? (Choose two.)

The latest revision history for the managed FortiGate does match with the FortiGate running configuration

Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

The latest history for the managed FortiGate does not match with the device-level database

Configuration changes directly made on the FortiGate have been automatically updated to device-level

NR. 46 Was ist der Zweck von ADOM-Revisionen?

To create System Checkpoints for the FortiManager configuration.

Zum Speichern des aktuellen Zustands des gesamten ADOM.

So speichern Sie den aktuellen Status aller Richtlinienpakete und -objekte für ein ADOM.

So stellen Sie einzelne Richtlinienpakete und Einstellungen auf Geräteebene für ein verwaltetes FortiGate wieder her, indem Sie zu einer bestimmten ADOM-Version zurückkehren

NR. 47 An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?

FortiManager will not allow the administrator to delete a referenced address object

FortiManager will disable the status of the referenced firewall policy

FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

FortiManager will replace the deleted address object with all address object in the referenced firewall policy

NR. 48 Sehen Sie sich das folgende Exponat an.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

NR. 49 Sehen Sie sich das folgende Exponat an.

What is the purpose of setting ADOM Mode to Advanced?

The setting allows automatic updates to the policy package configuration for a managed device

The setting enables the ADOMs feature on FortiManager

This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

The setting disables concurrent ADOM access and adds ADOM locking

NO.50 Siehe dazu die Abbildung.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

It disables concurrent read-write access to an ADOM.

It allows the same administrator to lock more than one ADOM at the same time.

It is used to validate administrator login attempts through external servers.

NR. 51 Sehen Sie sich das folgende Exponat an.

Ein Administrator hat ein Firewall-Adressobjekt "Training" erstellt, das im Richtlinienpaket "Local-FortiGate" verwendet wird. Welche IP-Netzmaske wird bei der Installation auf dem Local-FortiGate für das Firewall-Adressobjekt "Training" installiert?

10.0.1.0/24

Es wird eine Firewall-Adressgruppe auf Local-FortiGate mit den Objektwerten 192.168.0.1/24 und 10.0.1.0/24 erstellt

192.168.0.1/24

Local-FortiGate wählt automatisch ein IP-Netzwerk auf der Grundlage der Einstellungen seiner Netzwerkschnittstelle.

NR. 52 You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

Any pending device settings will be installed automatically

Any unused objects from a previous ADOM are moved to the new ADOM automatically

The shared policy package will not be moved to the new ADOM

Policy packages will be imported into the new ADOM automaticallyD

NR. 53 Siehe das folgende Schaubild:

Welche der folgenden Aussagen sind auf der Grundlage dieser Konfiguration zutreffend? (Wählen Sie zwei.)

Derselbe Administrator kann mehr als ein ADOM gleichzeitig sperren

Unerwünscht geschlossene Sitzungen halten das ADOM in einem gesperrten Zustand, bis die Administratorsitzung beendet ist.

Durch das Entsperren eines ADOM werden Konfigurationsänderungen automatisch an den Genehmigungsadministrator übermittelt.

Durch das Entsperren eines ADOM wird die Konfiguration automatisch auf den verwalteten Geräten installiert.

NR. 54 View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

NR. 55 Siehe dazu die Abbildung.

Welche beiden Aussagen über ein ADOM, das auf dem FortiManager in den Normalmodus gesetzt wurde, sind zutreffend? (Wählen Sie zwei.)

Es unterstützt die FortiManager-Skriptfunktion

Sie ermöglicht Konfigurationsänderungen für verwaltete Geräte in FortiManager-Fenstern

FortiManager installiert den Konfigurationsunterschied in den Revisionen automatisch auf dem verwalteten FortiGate

Sie können dasselbe ADOM nicht mehreren Administratoren zuweisen.

NO.56 An administrator would like to create an SD-WAN using central management in the Training ADOM.
To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

Specify a gateway address when you create a default SD-WAN static route

Enable SD-WAN central management in the Training ADOM

Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings

Remove all the interface references such as routes or policies that will be a part of SD-WAN member interfaces

NR. 57 Which two statements regarding device management on FortiManager are true? (Choose two.)

FortiGate devices in HA cluster devices are counted as a single device.

FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

The maximum number of managed devices for each ADOM is 500.

NR. 58 Sehen Sie sich das folgende Exponat an.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

The unused objects that are not tied to the firewall policies will be installed on FortiGate

The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

The unused objects that are not tied to the firewall policies in policy package will be deleted from the

NR. 59 An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?

First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route

You must specify a gateway address when you create a default static route

Remove all the interface references such as routes or policies

Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

[Jul 17, 2022] Lektion Brilliant PDF für die NSE5_FMG-6.4 Tests Free Updated Today [Q36-Q60]